Yes, this is hugely important. If any photos are being uploaded without my explicit action, I consider it a huge violation of trust.

I've disabled every permission messenger has until there is clarification here.