AirVPN allow port forwarding.

I use Mullvad for my day to day devices like my phone and laptop, and AirVPN in my homelab for things like torrenting.

On my graphene OS phone i use the Pixel camera for normal photos (networking permission denied), which get synced to Immich.

Then in the stock Graphene camera app it lets me change the location where pictures are saved, so i just set it to a folder not monitored by Immich and i use that for throwaway pictures of things like you mentioned.