I hate people who are demanding of open source projects but... doing performance improvements and adding comic book support before making the product secure enough to expose to the internet is wild prioritization and I don't know what else to say.
Or release native clients that can use OIDC.
Doing neither sucks =[.
I've had my instance on the internet for years without issue. (Tailscale is great for me, but not feasible for family)
Sorry, but you are being one of those people there. Open source development lives on intrinsic motivation and community. If those things which you want, aren't things that motivate other to donate their free time to, you can implement them yourself, you can try throwing money at people to do it for you, you can take other unwanted chores from them to free their time, but you really ought not push negativity lime this.
What about it is insecure with regards to exposing it to the internet?
Just use Tailscale. It’s always 1 day away from an 0-day anyway.