Are photos considered PII?

Not in general, but depending on what’s on them maybe. A profile picture showing my face definitely is.

But I’m also not sure that they only have to give you PII.

PII is a US-specific concept that has little relevance to the GDPR. So I wouldn’t say for sure that they have to give those photos to you but it wouldn’t be as simple as “not PII”.

[deleted]

Ummmm

The GDPR also covers data portability, so preventing your data (not just personal data) from being held hostage.

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...

GDPR covers more than just PII.