I don’t use Immich, but want to say that your post here is very detailed and level-headed - and I appreciate it. Giving users more choice over how their data is used is always good.

Another +1 to openvas. Specifically, I have had much luck with this Dockerized version: https://github.com/immauss/openvas

The ones that went through FIPS 140-2 Type 3 or above validation are legit. We used Apricorn for CUI data…examples: https://www.archives.gov/cui/registry/category-list

I went with Kanary because it covered quite a lot and it is frequent, at least once a month - but EasyOptOuts does look like it’s worth the money.

someone trying to sell more copies of their book…cool story bro