Chiefmas
Hello,
Thank you for your questions.
When playing videos from Plex, Emby, Jellyfin or Webdav server, the video stream is re-broadcasted through SKYBOX to other people in the room.
Rest assured, no credentials or passwords are shared during this process. Only a playback URL containing a temporary token is shared. The shared URL is not stored and will expire automatically when the room closes.
When playing videos from SMB, DLNA or AirScreen server, the video stream is fetched directly from the source server.
Hope that helps. Let us know if you have other concerns.