Like I said, if you follow the dockerfiles you will end up with a similar result on bare metal.
It’s your own decision if you want to deviate from what the developers want to support.
A project doesn’t need to produce binary releases.
No one is forcing you to use containers for Immich. It’s simply the most robust way to support it for the team.
You can just take a look at the dockerfiles and follow those steps on bare metal.
What’s the point? Any free software alternatives will still rely on the proprietary TCP/IP stack in Windows.
Windows comes with quite the advanced firewall built in. Why not use that?
It’s already on Windows
It looks like it’s excluded from the F-Droid build.