I use tailscale when I'm in these situations. It even works behind the most cursed CGNAT like starlink where it's impossible to even port forward.

As long as your tunnel is running you just use the private IP address for your jellyfin machine and your parents will access it like it's local.