It is but this established pattern is well standardised & documented by the public suffix list project. There's generally two conventions followed for this pattern:

1. Use a separate dedicated domain (Immich didn't do this - they're now switching to one in response to this)

2. List the separate dedicated domain in the public suffix list. As far as I can tell Immich haven't mentioned this.