You didn't mention your laptop specs but I'd say if your laptop has USB 3.0+ ports then you should be okay with plugging in a multi-drive USB DAS (like the ones with 2-5 drive bays) or even a single drive USB enclosure if that's your preference. I have a few that I use on and off without issue.
Slower USB speeds are also functional but the performance hit will be noticeable.
Adding onto the other comments, if you have admin access to your network router/firewall you can configure the incoming port forward itself to only allow specific IP addresses while dropping traffic from any other internet WAN IPs. It's a bit like using the Jellyfin whitelist/blacklist but doing it at the network level. This drops all unwanted internet traffic to that port at the firewall before ever reaching the Jellyfin software. Downside is having to occasionally update the firewall whenever there are IP address changes.
This is probably only feasible if you only have some specific Jellyfin clients in mind to accept connections from, not any random person from any random WAN IP address.