This is the correct answer. Anything proprietary phones home and inserts malicious metadata into pictures that allow others (social media) to know who, when and how the photo was taken.

You can even use the proprietary Pixel Camera on GrapheneOS and just deny network permissions, or if you’re worried about IPC (if you have another networked Google app installed) it can be in its own private space. And then just strip the exif data if you want before sending it anywhere.