Things like Immich or Nextcloud are far too much for what I need, I basically just need a password-protected upload interface and the ability to grab the direct links to the images to embed them.

Why do you care that they do things you don’t need if they also do what you need?

Because these do just what you need and do it well.

Reverse proxies do not give you security.