Even better, the app can use the OS image picker and don’t have any other access to photos.

It won’t work for all use cases, but when it works it’s very practical. I’d love to see apps use that as the default - and request additional access only when the user’s current action actually requires it.