Since Jellyfin, qbitTorrent-nox and the arr-suite are available as docker containers, you could try one of the many docker web UIs. I never used one of them since I’m happy with my one file docker compose configuration, so I can’t recommend one.

It really depends on the use case. 😏

They shouldn’t play with our food. Food is not a toy.

:) the hardware is still more capable than a brick:
Plug in favourite installation media stick, push reset button (if there is one), reinstall.

Can an OS be bricked?:

A brick (or bricked device) is a mobile device, game console, router, computer or other electronic device that is no longer functional due to corrupted firmware, a hardware problem, or other damage.[1] The term analogizes the device to a brick’s modern technological usefulness.[2]

Edit: you may click the tiny down arrow if you think it can’t. ;)

You might be confusing public IP addresses with ports?

I mean publicly addressable address like in: not in a private network where SNAT/ masquerading is in place between the torrent-client’s host and the Internet.

It was mentioned, that no port forwarding is in place.

Not sure why you would sometimes see your status as fully connectable

One side of the connection needs a public address, not both. When both parties don’t have a publicly addressable IP, the status is firewalled. I guess.