I know the risks. The most somoene could do is gain access to the things im already sharing without having to create a login first. Or i suppose they might be able to intentionally break things, but that would really be only minor inconvenience for me.

Most abuse i see these days is from LLMs ans automated scripts completely unrelated to jellyfin, fail2ban mitigates most of that easily.