If you are worried about that then I can highly recommend https://github.com/alangrainger/immich-public-proxy

I keep that running on a VPS, but with with proper firewalling you could probably run it on the same machine.