Seems that any effort to receive files from e.g. Photos results in Photos not having sandbox entitlement to write to the temporary file.