I started using Jellyfin recently, and it includes a nice feature where you can disable remote login for specific accounts. This is a nice feature because you can make a dedicated “admin” account with all the consequential management permissions which can only be accessed from a host on the same LAN. You then have non-privileged user for yourself which you use to view content outside your LAN. It’s an added layer of security for your instance that I get some peace-of-mind from. Adding comparable functionality to Home Assistant would be great.