I don’t use Immich, but want to say that your post here is very detailed and level-headed - and I appreciate it. Giving users more choice over how their data is used is always good.

Another +1 to openvas. Specifically, I have had much luck with this Dockerized version: https://github.com/immauss/openvas

The ones that went through FIPS 140-2 Type 3 or above validation are legit. We used Apricorn for CUI data…examples: https://www.archives.gov/cui/registry/category-list

You can save files via streamlink: https://streamlink.github.io/

I went with Kanary because it covered quite a lot and it is frequent, at least once a month - but EasyOptOuts does look like it’s worth the money.

I thought that high-deductible health insurance plans were already the norm.

someone trying to sell more copies of their book…cool story bro

Microsoft and Okta (that I know of) have implemented this number matching to deal with Push MFA fatigue, but also when certain risk factors make your login look riskier (i.e. impossible travel from an IP located so far away from your last login IP, you couldn’t have physically travelled to the new location in the time since the last login).

More info: https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/advanced-microsoft-authenticator-security-features-are-now/ba-p/2365673

edited to share a better link