Yep, a Tailscale funnel URL is publicly accessible to anyone who knows it. And while it doesn’t expose your machine’s IP, Jellyfin is exposed publicly. Only the port you configure is reachable, but that doesn’t make it secure in itself - you definitely need more security. I don’t have anything critical on my server so I’m not overly concerned but I still use CSF to block traffic from most every other country and limit abuse.
I would argue that your “enhanced” sentence is even MORE typical of AI. The first sounds like the style of a standard news article with a little corporate-speak, while the second is straight up head-of-marketing internal memo style.
Regardless, I agree that AI-detection can’t really be automated or codified. But I don’t think it matters. Bad writing is bad writing.