I used to pay for Ente as well but then I tried Immich & IMO is just so much better. It is THE Google Photos alternative with almost all the features. And as you said, you can get encryption with LUKSing your drive or partitions. I have automated my backups so I am pretty much at ease especially after the stable release.

All photos in Ente are E2EE — only client devices can decrypt it. Immich doesn’t have any encryption thus allowing anyone who manages the server to view your photos as they are. Immich is fully self-hosted while with Ente you have an option for paying Ente or self-host. I honestly prefer Immich because the features outweigh the encryption as I own the server myself and Ente is a bit complicated to setup — I think you even have to deploy the entire Ente Ecosystem Stack.

If you don’t want to pay Immich for backups, you can take care of off-site backups yourself using tools like rclone to your hard drive or any off-site storage of your choice. A paywall here would be not allowing offsite backups at all unless you pay Immich.