This seems like a lousy architecture. I don't want to upload my photo. I want to upload a SHA hash of my photo. For most high-security applications, I don't wan

This seems like a lousy architecture. I don't want to upload my photo. I want to upload a SHA hash of my photo. For most high-security applications, I don't want to share my photo. And yes, this is easy-to-hack. Lo-fi: I can take a photo of a photo. The foreign-hosted web site, with no advertised business address, ToS, privacy policy, or corporate entity behind it doesn't give warm feelings either.