It looks like the charges are from using the credentials they found not just for finding them. It’s definitely a crap charge because logging into the DB exposed the wider issue of being able to access other customers records.

I think that’s per conversation so you have to remember to set it.

If you’re looking for a decent setup but maybe not the cheapest- Nvidia shield with an external hard drive would work very well.

You could always build or buy a nas and just run Plex as an app through either your current fire stick or get a cheap Roku stick (although now you’re back in the same ad garden for a player but Roku is minimally invasive imo- especially with a pi-hole for dns)

That’s the golang gopher