I removed the password from the server and had them try again, same issue. Every one of my friends with the Epic version of the client times out connecting from the session list (it is listed there correctly, even knows it needs a password). Steam versions of the client can connect to the server just fine and play without issue. The ARK server boots up fine, the '-crossplay' argument Is listed on the command-line echo in the server startup.
For what it's worth: Hosting a white-bread The Island instance on my personal server (same server that is hosting a Conan Exiles quite successfully for a couple of years now) with no mods, all default settings.