It would be helpful to set a workspace user’s photo visibility administratively by the admin-console directory settings, or via GAM/or a Rest API on behalf of the user.
To require an end-user to go into their user settings and update the Profile Picture visibility is senseless when they are not a personal account, but a workspace created account.