(Continued)
4) Seriously, have a backup of everything you cannot bear to lose, like those photos. Preferably offline, wholly independent of your primary cloud service.
5) The post does not mention whether this person has, but if something like this happens to you, I would recommend that you talk to a lawyer, perhaps to a consumer rights association, not to the internet. IANAL, etc.
6) Also, remember that Apple Support not being able to tell this person the details of this happened is by design, to prevent social engineering attacks, confidence scams, and so forth. It sucks when you find yourself on the wrong side of it like this, but that is why legal assistance would be the way to go.
--
TL;DR: Have backups. Review those backups on a semi-regular basis. Can you still access them?

