Given what you've got running I only really recommend, as other have, portainer. It's made my life so much easier. Edited this since I saw you have homarr and I must've missed it the first time.
Rizoid
There's a docker container that I run on my server.
https://gitlab.com/Bockiii/deemix-docker
That's the container I use. It's good enough imo.
I use deemix and jellyfin for playback. Browsing on deemix is not as good as spotube but I like it.
Casting is always weird with networking like that. I'd highly recommend trying to find a way to run jellyfin locally cause nothing will really make Tailscale play nice with casting in my experience.
I'll say that I've run both Kavita and Calibre+Calibre-Web. I've stuck with running Calibreand Calibre Web together. Kavita was great but since I read on kindle and Kavita-email never worked for me I went back to Calibre. I also prefer calibre since it lets me convert files and change the cover images.
Personally I had more issues getting kavita to work the way I wanted than I did with calibre.
Not safe? Setting up a VPN isn't that hard.
This shouldn't surprise anyone considering they gave Grahan Hancock a whole fuckin series of bullshit. Netflix's "documentaries" have been jokes for a few years now.
I share with my wife and just got the family plan. It's overkill probably but it makes it simpler and I don't have to think about 2 separate subscriptions.
Listen man I actually thought RoP was decent but God damn that's very incorrect.
I saw that once a while ago on reddit. If you're pirating you should be hosting it on jellyfin or something then you'll never even have a chance of Microsoft seeing your data.
Invasion isn't a bad show but ignoring the fact that See, Silo, Severance, Slow Horses, Foundation, For All Mankind, and most other shows on Apple TV exist is just dumb. Ted Lasso was mid after season 1 imo but Apple TV has an unmatched quality level with most of their library. I dislike Apple but they've been making banger after banger compared to every other streaming service and I hope Monarch is just as good as everything else.
If you go the android route turn on Apps Only Mode in the settings. It gets rid of the home screen ads for the most part and disabled a lot of the "features" that Google tries to push.