On Graphene you can set very good limits and if an app requires access to all photos but you don't want it to have that access, you can turn on a setting that makes the app think it has full access but really only has access to photos you selected.

The latest Android media picker from the Googs has similar outcomes, granting access to just specific photos.

I'm not sure why but I always give permission to all because sometimes it's a pain to try and add a photo then it asks again and you add the photo again