Good thing, otherwise they would have exposed countless photos via Google Photos.

Today, a photo file might be hosted at:

  photos.fife.usercontent.google.com/pw/[snip]=w[####]-h[####]-s-no-gm?authuser=0

But it used to be a little closer to:

  ...[google_site].com/[superLongAlphanumeric].jpg

And no auth required, URL only!