This particular case aside, you can set privileges with facebook photo albums. It's possible to set them so that only your friends can see them, and not friends of friends. This is useful if you have pictures of your children.
However, bear in mind that there is a loophole. It happens like this:
Harry is friends with Tom who is friends with Dick (but Dick and Harry are not friends with each other).
Harry has a photo album on Facebook.
Tom comments on a photo of Harry's children saying "Great photo mate!" or something similar.
This comment, plus accompanying photo, will appear (along with any other Tom news) on Dick's Facebook news-feed. And if Dick clicks on it, he can then browse through the whole of Harry's album, despite not being a friend of Harry's. And even though Harry has set his privileges otherwise.
Try it. You'll see what I mean...