I imagine there’s a significant chunk of users who don’t know or care how to properly open their server up to the world and are relying on the Plex proxies

That seems like the obvious place to put a subscription that won’t get people upset. Or maybe it’s in the presentation.

When HomeAssistant started a subscription, they renewed their commitment to opensource, added new remote features with obvious costs under subscription while still letting you do it yourself, plus made it clear this funded continued opensource development. I happily pay this and haven’t been disappointed. Did Plex fumble a similar opportunity?

There’s a FaceID setting for “attention aware” that I think is on by default. It won’t unlock unless you are looking at the phone with eyes open.

That won’t help with police abuse of authority, but if you power down, restart, or lock the phone it will require your password. US police can’t legally require you give up your password, although courts have.

You can choose not to use FaceID, but it’s less convenient