It’s more common than you think, like Apple has done a great job integrating privacy and security features into their OS both because they don’t really stand to gain from user data collection the same way Google does, its a good selling point, it helps them protect their app store revenue streams etc. nd also because they actually care about it.

OTOH they are agreesively anti right to repair

Valve is a good company in that they make an enormous amount of money running steam and they use that money to fund generally positive things. That’s about as good as you can hope tbh

Sure but I would think Anubis would also somewhat stop DDOS attacks since clients need to pass Anubis to access the website and across a DDOS swarm that would use up significant resources.

Wouldn’t anubis be effective against DDOS attacks?

You can use Immich, it’s not perfect for this use case but it is searchable by content. You could just create a second account so you don’t even need to host an extra service