I had an HMD Nokia Android phone where the camera app had Facebook integration. It reached out to their servers every time the app started despite my not ever having had a Facebook account. I wouldn't be surprised if they also used this backdoor to access photos via the camera app's permissions.

Suffice to say, Nokia is on my blacklist of companies to never patronize again.