Isn't this the same issue as with a website like HIBP, and other sites that appear after a data breach/leak?
Users are disclosing to the website what they hope has not been discovered by someone else -- e.g., usernames and email addresses, or in this case photos, they hoped to keep private. Unfortunately, the website is "someone else".