I saw that now too. Opt-in isn't enough here, the user of the messenger app should get consent from all folks on those pictures before auto-uploading anything.
Facebook lets you opt-out of being tagged, which is about all they can do. The photos don't being to you, plus they're not going to know that you're in a photo until after it gets uploaded.