Is Google Photos THAT bad for privacy?

Even IF you are deciding to trust Google’s privacy practices as they are written today (a questionable decision in my view, but everyone is free to build their own threat model), you are ALSO trusting that this data will never be compromised - hack, rogue employee, future data sharing agreement, updates to privacy policy, etc

The only way to mitigate these potential future threats is zero-knowledge encryption at rest, which I do not believe Google Photos provides