It’s hard to trust a company when when they’ve already demonstrated that they [can’t be trusted](https://arstechnica.com/tech-policy/2026/02/discord-faces-ba...). And i’m sure there will be an argument of “but this will make it more likely that they’ll be safe about it to not have a repeat”, which will likely be true for a while. Then cost-cutting offloading to a third party that promises to not keep the data, or a new feature will come in that needs the photos, or a misconfiguration will happen where things that should be deleted won’t be, and we’ll be in the same boat again.
The only safe data is that which does not exist.