The reason the friend was able to steal the pictures was because the recipient left his e-mail program open and unattended. End-to-end crypto is useless if either of the ends are compromised.