That's a fair point -- a reverse proxy setup may be outside the scope of the jellyfin project, but as others have pointed out they also provide an official docker image with a docker compose and other container management solutions. It just seems like a logical next step would be to outline instructions for a more secure setup using something "standard" like nginx instead of leaving it as an exercise to the user -- who may not be so tech savvy.