Sorry if my point wasn't clear enough. You have to allow the browser permission to access Photos too. If you are allowing a browser access to Photos, then it's a pretty good bet you are sharing the photo. Strip the location data.
Sure, but then it's less specific. Maybe I want to upload photos with EXIF to my Dropbox but without EXIF to Facebook. There's no way configure the OS or the browser that way.