I love that song, and I even heard it last week for the first time in forever, but when I see something like this, the only thing I think of is:

Sadly, it may not be an option for a lot of people, but on the fortinet firewall you can make policies and set up geoblocking.

Synology with Emby (do not use the connect service they offer) running behind my fortinet firewall. DDNS with my own domain name and ssl cert. Open 1 custom port (not 443) for it, and that’s it. Geoblock every country but my own, which basically eliminated all random traffic that was hitting hit. I’ve been running it this way for 5 years now and have no issues to report.