It's behind a login and they've asked for parents' consent for each child separately. Everyone with access has agreed not to share any of the photos.
I actually haven't shared my scraper script just because I think someone would then share the pictures (perhaps accidentally).
EDIT: I'll just add that there are no public photos of my kids and I ask anyone who takes photos not to share them outside family. So I do agree with your point.