Both appear on ScreenlyOS screens, on Raspberry Pi based players and the Player Max.
Verify SSL certificates
Off by default. When on, the player refuses to load a web page whose certificate does not validate.
Turn it on if your policy demands it and every page in your playlists has a valid certificate. Leave it off if a page you need is served with a self-signed or internal certificate, which is common on an intranet.
The trade-off is real either way, so make it deliberately rather than by accident.
Node Exporter
Off by default. When on, the player exposes hardware and system metrics in Prometheus format, so your own monitoring can scrape them alongside everything else you run.
Turn it on if you already run Prometheus and want screens in the same dashboards as your servers. If you do not, leave it off: the Details tab already surfaces the things that go wrong, in plain language, with no setup.