&gt; But for most people that&#x27;s the wrong default for things like decades of family photos.<p>That seems like a weird assumption, that there&#x27;d be a single person with access to an account containing the only copies of decades of family photos. If someone else has account access or if there are copies of the photos elsewhere, then &quot;destroy-when-I-die&quot; isn&#x27;t a big problem.<p>On the other hand, it also violates the way that I think things would usually work in the physical world. That is, if there&#x27;s a safe that only the deceased had the combination to, I can still drill it to access the contents.