What agreement they had with facebook I am unaware of. But facebook seemed to treat them as public.

Facebook and access have always been confusing and this is setup on purpose. Some photos show up in feeds some are available to other group members. Photos you think are private are private until someone else you know is tagged in them.