Not in general, but depending on what’s on them maybe. A profile picture showing my face definitely is.

But I’m also not sure that they only have to give you PII.

PII is a US-specific concept that has little relevance to the GDPR. So I wouldn’t say for sure that they have to give those photos to you but it wouldn’t be as simple as “not PII”.

Ummmm

The GDPR also covers data portability, so preventing your data (not just personal data) from being held hostage.

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...

GDPR covers more than just PII.