>only occurs when uploading photos to iCloud, and only to the photos being uploaded.
Or so they say? Did you see the source code?
Anyway that's not the issue.
The issue is what they are going to do next without telling you.
The issue is installation of spyware engine, not it's current usage.