Viewed from the "be maximally useful" perspective, it makes sense. I have 150,000 photos (maybe) -I don't want to approve each one. Even at the album granularity, I have thousands of albums. We all do.
Yes, its a giant, egregious privacy breach. That is pretty much definitional for a cloud based Photo archive/album service.