You don’t need to do that with jellyfin either. It includes the website for convenience, but you can just disable it or completely remove it and have just the server.

Last I read, the entire internet used less than 2% of the electricity we generate. Using the same amount of energy just for a spicy autocorrect is insane.

It’s not flawed at all. But its purpose isn’t actually to secure anything. Its purpose is to complicate the installation of alternative OS and to perpetuate vendor lock in, while sounding like it’s “for your security”. In that regard, it has succeeded.

There is also TPM and Microsoft Pluton, which serve the same purpose.