youmaynotknow

This is absolutely critical. Jellyfin is not made with security as an important factor.

Easy, mine is local only and on it’s own VLAN.

If you’re going to self-hosted instead of using a VPS (I know you said you’re looking at a VPS solution, this is just in case) make sure you can segregate your networks. A router that allows you to create virtual LANs, same with the access points and switches if needed.

You don’t want to expose all your devices to the internet for a few services.

You can still run the smart switches locally if you have the ones that support matter. But yeah, the old ones do require internet connection, which sucks.