The other day I sent out a link made with Google Photos' "create link" function. That's not a share to another user, just a link that anyone can open, no Google account required.
But one person showed me that hitting that link on her phone, Google wanted to authenticate her before showing the picture.
That is utterly unacceptable.