You specifically referenced the media pack, which in win 11 looks like it’s packaged as a pseudo Windows Store application. You also said Windows N, which is a different case (and the reason you even need it in the first place). I get the EU/GDPR thing, and yeah it’s probably a pain, but you said “doesn’t offer offline installers for anything relate to Windows 11 anymore”, without qualifying that is your specific niche case. Have you tried K-Lite? Do kids even use that anymore?

That’s a whole different story…UWP apps offline for an EU build is a “best of luck to you, pal” thing

I’m as anti-M$ as anyone, but this just isn’t true. The windows update catalog still exists for offline patches

Ya - or close enough (10.11.3). My LAN networks are my server and workstation subnets (both /24s) and my external NAT (my public ip). I also have my reverse proxy address (from jellyfin’s perspective) in my known proxies. From there, my external users are set to allow remote connections, have passwords set, and are set to “hide this user from login screens” and my internal users are set to NOT allow remote connections and to NOT hide from login screens. After that, i just use my public dns for every device whether it’s internal or external and call it a day

You can already do number 2 (with some restrictions). You have to set up your networking tab correctly, use blank passwords, and uncheck “allow remote connections” for the “local” accounts. i have things set up so that external users are forced to log in and local users just pick a profile. If you also add your external users’ IP addresses to the LAN Networks box, they’ll be treated as an internal user too (though how you keep that up to date is a bit more challenging). It’s not precisely the Netflix experience but it works well enough for us

Still a long way until the end of November…

You wildly underestimate most corporate IT security’s obsession with pushing updates to products like this as soon as they release. They also often have the power to make such nonsense the law of the land, regardless of what best practices dictate. Maybe this incident will shed some light on how bad of an idea auto updates are and get C-levels to do something about it, but even if they do, it’ll only last until the next time someone gets compromised by a flaw that was fixed in a dot-release