How would you expose Jellyfin securely without a vpn?

Assuming the user will not be connecting over vpn, but is both remote and non-technical, how would you expose Jellyfin to them securely?