The biggest security issues are "out of scope" because making a secure open-to-the-web media hosting platform is hard, especially for free. The devs have just flat out said they're not doing it.

Everything that people do to get remote streaming working is either incredibly insecure, or a workaround that means most people can't stream from your library on the devices that they want to.