I think it’s much easier to take a system that has working, audited E2E encryption, and add photo management on top of that.

In other words, I think the E2EE is the bigger lift, and the photo stuff is the easier piece to re-implement.