[FabCH]

I do happen to have some experience.

For 99.99% of the population, does the threat model really include targeted NSA attack with higher probability than „Google’s automated system sent the police to my door“? No, no it doesn’t.

It is demonstrably more secure for even a semi experienced sysop to host Immich for their family than for them to use Google/Apple.

But I do agree that _some_ experience is required.

[smallerize]

Hetzner has fewer employees I guess, but since your photos are decrypted there, you have basically the same problem.

[FabCH]

In memory. If the police shows up and they disconnect my server to sieze it, for example, the photos are lost to them.

And the Hetzner employee would need to specifically target me, because I doubt they would implement a dragnet that pierces through the bespoke random process on my bare metal server to scan the photos in memory.

That is a lot more secure than „Google scans all pictures routinely and fully automatically sends the police to your door, and you have no recourse if they are wrong“ that the EFF article discussed.