It’s hard to trust organizations to store digital data (including selfie photos) without leaking. Even without leaks, the data is still has the possibility to be accessed by members of the organization, their vendors and auditors. Will everyone use the data only for the intended purpose? I can’t be certain so I’d like to push back on these kind of requirements when I’m able.

Incidents of these selfie leaks have already been reported.

People that take a bucket to the river for their water don’t have to worry about plumbing leaks. Not having to spend time gathering water is worth the time of dealing with plumbing for me. I feel similarly towards having to do surface level vacuuming vs the time of dealing with firewalls.