That's the approach I took when I had VPN to my LAN ~20 -> ~10 years ago; now I worry about the massive "unknown unknowns" - sure, that Linux box doesn't have access to anything else... officially. But what vulnerability is there on that Linux box, or on the plex server, or anything else on your network, that might enable massive expansion of access?