You only need to vet the website if you care about the privacy of the picture, and a website is run in a reliably sandboxed environment, whereas local tools run

You only need to vet the website if you care about the privacy of the picture, and a website is run in a reliably sandboxed environment, whereas local tools run with much more elevated permissions.