We don't mind the masks in the photos, something to look at decades down the road to tell future family members a story.
My complaint is they delete the entire photo if another party takes off their mask on a ride (this happened to us, luckily just once). I don't know how it would work but they should have some sort of identifier to just delete from that party's account or flag the photo and then blank out/put a stamp on the unmasked face.
Something to consider if you're buying the package is that you might not get some ride photos. (I know sometimes they don't show up anyway but this increases that possibility)