It hasn't always been the case, but Facebook has a setting called "Who can see photos and videos I'm tagged in". There's also "Let friends of people tagged in my photos and posts see them."