Private photos should unlock only after a clear signal of trust. If someone requests access too early, you can decline, wait, or continue the conversation before sharing anything more personal.
If access feels uncomfortable after you have granted it, revoke it and use the report flow. A healthy product makes private photo sharing feel optional, reversible, and well explained.