I think it would make sense to distinguish between some random jerk posting a photo hacked from his ex-girlfriend's iCloud account vs a news article containing a hacked photo of a slide detailing NSA's PRISM program. Twitter already makes "public interest exemptions" for their other rules