> I don't need it to be trustless. If it worked well, the tradeoff would be smaller...

You mean, on a self-hosted Ente (or Immich), a off-device/server-side, capable multimodal LLM, like Gemma4 12b would do?