Calling deleting metadata image processing is a bit of a stretch. And you can disingenuously clean images either client- or server-side, that’s true, but if we’re getting serious here about data privacy, one could independently validate, build, and sign an executable for users to run locally. I don’t know of any similar technique to guarantee what’s running server-side.