Text:
I consent to Plex to: (i) sell certain personal information (hashed emails, advertising identifiers) to third-parties for advertising and marketing purposes; and (ii) store and/or access certain personal information (advertising identifiers, IP address, content being watched) on my device(s) and share that information with Plex’s advertising partners. This data is used to deliver personalised ads and content, ad and content measurement, audience insights and product development. Your consent applies to all devices on which you have Plex installed. You can withdraw your consent at any time in Account Settings or using this page.
Soure: https://www.plex.tv/vendors/ (Might have to clear cache)
Can also read about the changes here: https://www.plex.tv/about/privacy-legal/
I would not let anyone access my self hosted stuff who is not using a password manager and secure passwords.
I'm actually fascinated/frightened by the number of people here who are apparently comfortable running an exposed remote service on their personal network without enough tech knowledge to manage user auth themselves or maintain a stack with shared volumes....
I think most of the reason people are using Plex is that they don't have to expose services. Plex handles all the nat traversal and whatnot for them.
Also the people that know how to set that all up and still expose a Jellyfin server to the public internet