Scanning the internet for jitsi servers is pretty trivial. If you run your own server without authentication:
- Anyone can use your server.
- Vanity URLs are not safe.
In other words: you have pretty much the same security problems as when using meet.jit.si (except it's slightly harder to find and you presumably don't have to worry about the current lack of e2ee -- assuming you trust your hosting provider -- since you control the server).
My recommendations:
- Always use authentication on self-hosted servers unless you intend for them to be used by anyone (like
meet.jit.siand other public servers).