Publishing such a picture generally requires consent under § 22 KunstUrhG , with exceptions under § 23 . "There is no right to privacy in the public sphere" is simply not an accurate description of German law. And "not a crime" does not mean something cannot violate someone's rights.
The comparison with memory ignores what makes a recording different: it can be copied, distributed and matched against other records. Someone remembering my face does not give them the same capabilities as having a photograph of it.
And protecting personal information is hardly some recent corruption of hacker culture. The CCC's own ethics say "Make public data available, protect private data", an addition they date to the 1980s: CCC hacker ethics .