Graylog might be worth a look

But your isp modem will have total access to your local devices.

Why would you need to expose SSH for everyday use? Or does Jellyfin require it to function?

Maybe leave that behind some VPN access.

That is true. The issue is that because there are so many permission escalation issues in windows, that many anti malware products must run as kernel drivers.

An OS should not have to require a 3rd party driver for security.

Microsoft should be writing that driver as an OS component. Drivers should be restricted for taking to hardware.

Good bot.