An easy solution is probably to just allow anyone to log in and follow along. They don’t even need to be affiliated with any existing team, player, or participant. Then that avoids malicious takeovers, cheating, hacks, etc.
The only problem is leaves is if someone’s phone dies and they need to “hand off” control. But that might be an edge case we have to live with for now.