I think the privacy controls on Facebook and Google are more than adequate to prevent photos from falling into the wrong hands. Both social media services have a lot of controls on who can and cannot see photos that are posted to their services. But, ultimately, the final responsibility to keep photos safe falls to the user. If you do not want a photo published, don't publish it. As long as you are otherwise conducting yourself properly in public, this is likely all the safeguard you need.
While both companies have worked to make sure individuals' photos are only shared with those intended, they could still do more. For example, it could be set so that each time a photo is shared the poster must select which group of friends will see the photo. Warnings could also be given every time a user is about to post a photo with public settings from their private account. So there is more that could be done.
People will unwittingly post photos on sites such as Facebook and Google assuming their pictures are stil theirs. The privacy settings on both of these sites and many more are not straight forward enough for the average person to fully protect themselves. Therefore, these photo's can be used by anyone at anytime and for any reason!
No, I don't think that Google and Facebook's customizable privacy settings provide adequate protection from individuals' photos falling into wrong hands. And I don't think that it's their responsibility to do so, either. If you don't want something personal in a photo to be seen on the general Internet, then don't upload it to a public network!
I do not believe Google and Facebook's customizable privacy settings provide adequate protection from individuals' photos falling into the wrong hands. The privacy settings are far too complicated and include several different settings for several different things. Also, settings seem to display different between different platforms, depending on the device, further complicating matters.