Hello
Thank you for the review.
Flirt module takes images from default Profile Photos album which is public by default. The album stores Avatar image and images which are displayed on Profile page. So, usually they are public. However we'll think over what can be done to solve the issue.
Thanks again.