On GrapheneOS, you can allow access to only the images that you want to upload