I personally just upload in a public post and then long-press the image preview in the compose view, then copy the link in a DM. Its a few more steps but its clear that the photo is not private, which is not possible on nostr yet