How can they know that’s sufficient to preserve user privacy? The code sends data they don’t know of to Apple. That could contain anything, including compromising photos (not that likely) and private keys (slightly more likely)

They also should not be that surprised to find photos in my firmware, as they have shipped photos in their firmware in the past (https://www.nycresistor.com/2012/08/21/ghosts-in-the-rom/)