Whats to say they didn't take screenshots of the conversation that got backed up to Google Photos or iCloud anyway?

I dont think this changes anything, in regards to a malicious(/incompetent) recipient.