plex/jellyfin server with wireguard running on your router would probably be a good setup as long as whatever device they’re using supports wireguard
I don’t use MacOS, but it seems like you can disable Gatekeeper with the command line. I doubt a change in its behavior would make a difference if it’s disabled in the first place.
you could also just crop it out in most of them