The problem is people have to actually do this, and it's cumbersome.

The solution is just straight up banning apps from the app store which request full photos permissions but only need a picker.

Whatsapp only needs a picker, it's not Google photos. Just make that part of the developer terms and start banning low hanging fruit and the apps will confirm in no time.