Only Plex accounts you approve can enter. Your movie files stay on your Plex server.
This cPanel site connects to Plex directly. Nothing is installed on your Plex server. Credentials remain server-side; visitors only see the synchronized catalog.
For automatic updates, set a cPanel cron job to run cron.php every 5 minutes. The Settings panel can also start a synchronization manually.