If you decide to playback video using an external player and want to use the privacy feature with a session token, this is for you.
On iOS and tvOS you can serve the manifest directly into a native external player, this how-to will show you how to handle this situation properly:
https://docs.api.video/delivery-analytics/private-video-on-hls-or-external-players#private-video-delivery-on-ios--tvos-native-player-hls