It seems that this can be mostly side-stepped by not using iCloud for storing the photos and preferably using something self-hosted instead. If you upload all your photos to e.g. Google there's nothing stopping them from scanning them and possibly using it against you as well.