I think network access would be legitimate if used specifically by the iCloud service to display photos. It probably happens in a separate background process that manages the photo library, not in the app itself. But it's up to you to decide, of course.