

I mean containers make the networking pretty easy, everything beyond that is optional based on your threat model.
Same as hosting anything networked, you can do it easy or do it safe.
(but also wireguard is kinda an O(n) problem while exposing to wan is an O(1) problem - at least IT man hours wise)



I only personally have experience with jellyfin, but the docs of Emby look to support the same remote access as Plex (without the TURN server).
So essentially you can use a login instead of a server IP, but it does require port forwarding or upnp on your router - which you may already have enabled.