There were some hoops for me to jump through in order to get secure remote access working for sure. Fortunately for my family that connect remotely, it’s transparent for them and doesn’t require any kind of VPN or tunnel. They just need URL, user, and password.

And for subtitles I’m not sure what the differences are between the two, but I’ve used them plenty on jellyfin and they seemed to work well and render nicely.