How would you expose Jellyfin securely without a vpn?

cross-posted from: https://discuss.online/post/40181742

Assuming the user will not be connecting over vpn, but is both remote and non-technical, how would you expose Jellyfin to them securely?