I’ve passed through my GPU for acceleration purposes which has worked pretty well. I don’t see a passed-through GPU in your screenshot. I’ll assume you turned on the correct IOMMU and SR-IOV settings, added the PCI:E hardware to that VM, and made sure it showed up inside the guest OS?
Can you share what the final desired goal is? It sounds like your goal is actually to provide your services to Bob securely over the internet, is that a fair description? You mentioned eventually grabbing a domain, how do you feel about publicly exposed services with authentication? For instance, I use authentik in front of Jellyfin and paperless myself for a little extra authentication juice.