That’s overly complicated for some of the users - most of them aren’t very tech savvy, and they’re watching via all kinds of devices - TV’s, iOS, Kindle, etc.
I don’t see any major security reason for access requiring a VPN. Are there particular vulnerabilities that you’re concerned about, or just those that generally come from having a web-facing service?
Yikes, how Draconian. Id be fucking pissed if someone came in and forcibly open sourced a product I had invested millions in developing.