Not sure if it is still like this, but jellyfin used to leak massive amounts of metadata. For example by checking the thumbnail paths (which were unauthenticated) you could see what shows/movies someone had.

Might want to warn the "friend" if they don't have auth on the tunnel itself.