Taking pictures of people and posting them without their permission while they're at a private business is malicious in my opinion. And also illegal. There's a reason he had to hide it. Ethically it's no different to me than connecting to someone's webcam at home and uploading the photos.