Right, but the exact same thing could have happened with Google Photos or whatever it's called these days if you don't have 2fa enabled.
Not really. Google has invested heavily in making its login process as secure as possible. Unless you had a very easily guessed password and were unlucky enough to live in the same region as your attacker, it'd be very unlikely for this to happen to a Google Photos user.
That said, nudes don't belong in any cloud.
The vulnerabilities that opened iCloud to these attacks were due to its iPhone integration (restoring device from backup to be more specific). It also allowed the attacker to bypass 2FA (probably in the name of user experience).