Congress REALY needs to pass strong privacy regulations.
They could do that. The first thing I'll expect them to do is exempt themselves, so that the government(s) can continue to work with these same companies to violate your privacy as they have been doing.
The reality is they have no idea what this is all about.
If we want something done __and done right__ we're gonna have to figure it out on our own.
But I believe location metadata is stripped for apps without location permissions, and the Photos permission is largely unnecessary thanks to the near ubiquitous Share button support.