- Backups can be sent to the commercial cloud (encrypted) using Duplicati among other solutions. Or just a separate hard drive.

- You access your server using Tailscale VPN, he mentioned it.

- You can allow external access to your apps safely using cloudflare tunnel (per app). Immich works exactly like Google photos and there's even a really good app!

- Each app is in its own container sandbox, with basic hygiene and monitoring it should be fine. And you aren't a profitable target anyway.

- Update require to restart the container with the latest release, your data isn't erased. Solutions such as Umbrel have a community of open source devs doing the updates for you.

Overall, it's not about removing all of our dependency to commercial services, but to do the switch slowly and regain autonomy. Having an alternative, however how imperfect it is (Jellyfin often freezes for me!) is worth it - otherwise the future is bleak.

Immich rules. They just dropped a pretty big release that improved the android app experience quite a bit.

Everyone go checkout immich.