As for whether it can be compromised... Probably? It sends all or some of your photo to a remove server, so that can certainly be taken.