I think that's reasonable. Any person tagged in a picture can prevent it from being public. It can be implemented so that the most restrictive permissions carry through, but as I write it that way and reflect upon Facebook's history and stated attitude, it sounds naive.