It’s also really hard to audit, so if Google shares it and people access it, Google won’t know.

This is not cool for me because I don’t want my photos available to people other than me, even if they have my magic url with a token I didn’t create and can’t revoke.