There is an immich proxy project: https://github.com/alangrainger/immich-public-proxy

I wouldn't make the instance itself public, but I think this is a decent tradeoff. Of course still requires one to be a sysadmin.