It's a big, complex subject.
Some people don't care and allow pics because they have nothing to lose, or don't realize that there can be more serious consequences than embarrassment. You may have open-minded friends but odds are your boss is either worried about his corporate image (may or may not be a realistic concern, depending on...) or just an uptight SOB control freak that figures you don't fit in with his view of a perfect universe.
We don't generally allow anyone other than me to take our pics but there have been just a couple of times when someone snapped one before we had a chance to say anything. You sort of take a SWAG at the odds.
We were playing with another couple some time back and a guy they had invited along took a pic just out of the blue. I think he realized the uncoolness from myself and the other hubby giving him a low-key dirty look. He put his phone away, probably didn;t delete the pic but the girls had their faces buried in each other's.... well they weren't really identifiable. Still, it was a clueless act to snap a pic without asking.
I'm sure most have seen news stories of people losing careers. The person taking the pics can suffer as well if they are the catalyst for someone with a steady employment history being terminated. A hungry lawyer and some planets lining up "just so" can ruin a whole day.
It's not always intentional. We may have pics floating around from a ransomware situation with our system a couple of years ago. Don't think they did anything with our pics but they did flash pretty much all of them at me in a few seconds (I think using something similar to an archive bomb). The IRS did send us a letter and had us confirm our info because someone filed a return with our info. It was an automated system online that asked two questions and then said it would stop the other return from being processed or paid, so they got nothing. But that's a long, off topic tale.
I yanked all the drives from three boxes before they could pull the trigger but I don't think they even tried to encrypt them. I don't think they actually stole any pics either. Still doing forensics on those drives but I'm not a pro. I have some idea how they got in but doubt I'll ever get the whole thing put together.