I feel like what they would try to do in such a case is to make up some excuse to scan all the photos so you don't know what they're actually doing.