

All photos in Ente are E2EE — only client devices can decrypt it. Immich doesn’t have any encryption thus allowing anyone who manages the server to view your photos as they are. Immich is fully self-hosted while with Ente you have an option for paying Ente or self-host. I honestly prefer Immich because the features outweigh the encryption as I own the server myself and Ente is a bit complicated to setup — I think you even have to deploy the entire Ente Ecosystem Stack.
I used to pay for Ente as well but then I tried Immich & IMO is just so much better. It is THE Google Photos alternative with almost all the features. And as you said, you can get encryption with LUKSing your drive or partitions. I have automated my backups so I am pretty much at ease especially after the stable release.