That’s the main issue with how Immich has been developed: the main assumption was always that the end user would either self-host it on their own machine, or use disk encryptions (e.g. LUKS) for VPS.

The issue is that if you try to make it a SaaS, like PixelUnion does, there’s no real way to prevent the PixelUnion admins from accessing your data.

I have good hopes for https://zeitkapsl.eu/en/ , hopefully at some point they allow self hosting and then it will be possible to do what PixelUnion does with Immich, but with proper E2EE

They detail their encryption strategy here: https://pixelunion.eu/help/other/data-security/#how-our-encryption-works

[email protected] is a very toxic community as well, you don’t see SJW defederated from most instances.

Lemmy.ml is defederated from infosec.pub and lemmy.cafe.

Piefed having actual instance blocking at the user level make defederation less of an issue.

Those two links are 2 years and 9 months old.

The Threadiverse gets regularly okay feedback on Reddit, as show the several posts on [email protected]