Yes, I have Tailscale on my AppleTV. Only traffic attempting to reach your tailnet is routed to you, the rest is on his own network.

If you want to make it super easy for non technical people also use reverse proxies to your tailnet so jellyfin/plex is reachable at like “https://watch.example.com”. Pretty much the only friction for non technical people would be creating a tailscale account and being invited to tailnet I guess. But you could also just do that for them I suppose with auth keys