From my perspective, self hosting is a hobby, we run services we feel we need, but it’s also something we do for fun. As such some people enjoy thinking about and deploying the most secure server possible, regardless of actual threats. However, to directly answer your question, yes there isn’t really a lot that can be stolen from a self host residential server, maybe if you hack a valutwarden instance and acquire all the credit card details stored in it and all the id’s stored in it. But the main hack isnt stealing, but deploying a bot net of some sort.

Can’t comment on ente. I looked at it originally along with many others and initially chose photo prism. Ran that for around 6 months then switched to immich. Have no plans on changing any time soon. I host 4 users on it. It works great, been using it over 12 months so been on it from v1, and been through all the changes to V2 and V3 and never had a breaking change. Have auto updates in in podman for it so I never manually touch it. It just works.

I switched from photo prism after 12 months on it, to immich. Much prefer it and offers more and better features from my perspective.