Strange, Jellyfin doesn't log me out that often. Maybe a configuration difference?

I've heard about Jellyfin's security before but my, admittedly limited, understanding is that it's pretty limited in what an attacker could do. Granted I host behind tailscale anyway.

What's Plexamp and Tautulli?