I was worried about this and had to expose my Plex on the internet protected by oauth2-proxy.
So, yes.
Maybe it would be different if you were exclusively using it as a tunnel service.
I was worried about this and had to expose my Plex on the internet protected by oauth2-proxy.