The new image generator, released Tuesday, lets anyone remix faces from public Instagram accounts into AI outputs unless users opt out. Security researchers describe the toggle as buried, and the on and off states as nearly identical.
Meta's Muse Image AI, an image-generation model released Tuesday inside Meta AI, lets any user tag a public Instagram profile and pull faces, outfits, and settings from that account's posts into AI-generated images. Adult public-account users are routed into the source pool by default. Private accounts and accounts belonging to users under 18 are excluded automatically. The mechanism, announced the same morning on Meta's newsroom blog, has drawn immediate criticism from privacy researchers and at least one major Hollywood talent agency.
A Meta spokesperson, in a statement to the Guardian, described the system as "built with strong controls and safety guardrails from day one," with private and under-18 accounts excluded and adult public-account users able to opt out through "easy-to-use controls." Two independent security groups that have walked the opt-out path describe it differently.
Proton's published characterization is that "data sharing is turned on by default, the opt-out is buried deep in settings, and public backlash becomes the main way users find out what happened to their content." A Malwarebytes security-vendor blogpost published the same day described finding the toggle as "its own adventure" and warned that "the on and off states look nearly identical and a glance, and it's easy to leave one active by mistake."
The mechanism is what makes the default-in posture controversial rather than the underlying product. The user-side appeal is real: tagging a public Instagram handle to render a friend in a stylized scene, costume, or meme is now possible without that friend ever consenting to the specific image. A default that routes public-account content into the source pool is frictionless for the platform. The alternative for the user is a multi-step path through Instagram's Settings to a section labeled for sharing and reuse, a part of the app most public-account holders rarely visit, and one Meta has not surfaced an in-app notification about on affected accounts.
Independent coverage from Wired, TechCrunch, the BBC, and Android Authority reached the same conclusion: public accounts by default, private and minor accounts excluded, and a settings-tree opt-out available only to the individual account holder.
The exclusions close part of the surface area but not all of it. A child whose face appears in an adult relative's public posts remains in the source pool, because the opt-out runs at the public-account holder's account level, not at the face level. Malwarebytes flagged that gap directly. Creative Artists Agency, the Hollywood talent-representation body, publicly criticized the design on the grounds that it puts the burden of refusal on the people whose likenesses are at stake rather than on the platform seeking the data.
For an adult public-account holder the practical paths are short. Switching the account to private cuts it out of the source pool entirely. Toggling off data sharing and reuse in Instagram's settings stops the account's own posts from feeding generated outputs while leaving the account public. The setting neither fix changes is the images where the user already appears in other people's public posts. That is the off-switch Meta gives the user, working one account at a time, and no data protection regulator in the US, UK, or EU has yet issued a public statement on whether that switch is enough.