Sure but I would think Anubis would also somewhat stop DDOS attacks since clients need to pass Anubis to access the website and across a DDOS swarm that would use up significant resources.

Usually these kinds of services basically MITM HTTPS and re sign outgoing traffic with their own HTTPS cert.

Wouldn’t anubis be effective against DDOS attacks?

You can use Immich, it’s not perfect for this use case but it is searchable by content. You could just create a second account so you don’t even need to host an extra service

You can block traffic from clients that don’t have an HTTPS cert installed which lets you look at their traffic and make installing that cert part of the ohone’s carrier activation process. This is still silly though