MaggiWuerze

Its also possible for a webserver to offer two versions of an API. Add a new one that needs authentication, mark the old one as deprecated and add a checkbox to disable it. Then clients can update to use the secure one and if you use and unmaintained client you can enable the old insecure api

And you think if Jellyfin were a comparable size, there wouldn’t be just as many or more?

basically protection racket