> people behind a firewall wouldn't be able to actually receive any audio/video streams from Jitsi.

That part isn't really correct? Most firewalls block incoming connections not outgoing ones so both parties agree on a port, hole punching happens and then there is a connection is formed.