It might not exactly fit your scenario, but maybe consider a mini PC. Many streaming services work in a web browser, so you could check that all yours are available that way beforehand. I’m partial to Beelink but many companies have similar offerings. Little, quiet or fanless, low power usage.

Costs are a bit higher initially, though it’ll likely have security updates longer than an Android box like the Onn one, and having more RAM might lend to that longevity in that role as well.

A mini PC gives you options like switching to Linux, running an arr stack for ditching streaming etc., that might seem worthwhile.

They’d have to connect to it, and possibly reconnect. That aspect is the issue.

My users aren’t going to figure that out.

Oh no they’ll see I’m watching TNG

They prohibit large amounts of media being streamed, and they reserve the right to suspend or terminate accounts for it. Multiple years in, that has not happened.

Edit: here, you can read https://blog.cloudflare.com/updated-tos/

Skill issue

CloudFlare tunnel with Zero Trust, plus their bot and abuse blocking. Users can get in with the right oauth, plus only allowed from the countries I know they’re in. Then just their username and password on jellyfin.