... Or, they could use a private server with http simple auth, and be perfectly secure without having to give all their personal photos to Google