This is definitely an 'added' risk they need to qualify - how they will stop any verification from leaking private images.

One would hope that such checks should be minimal and therefore performed by suitably qualified (and equally audited) personnel. As you allude, it is more likely that such work is outsourced in the same way that the manufacturing of the phone is.