In my opinion, that oversimplifies it. PlayStation and Xbox have disks without the “Next Gen” Version on it for years, but nobody cared. At this point there are also no games that have this license-on-a-cartridge.

After all, you can still sell the cartridge, something you cannot do with a completely digital game.

First of all: not everyone can publish port 80/443 or even has a public IP.

My short answer: you’re overthinking it way too hard and I think sticking that microSD-Card into the device you want to watch on is your best bet.

You’re chasing ghosts.

Your post is very confusing. You want to use it only locally (on your home), but it can’t be a local-only instance.

You want to e2ee everything, but fail to mention why. There is no reason to do that on your own network.

I do not know why you want to use a VPN and what you want to do with it. Where do you want to connect to?

What is the attack vector you’re worried about? Are there malicious entities on your network?