Yeah, the thumbnails don't cache -- it's annoying for navigating, but I suppose it makes sense if you're trying to accomplish some level of private-ness.
Additionally, if you want images to be REALLY private, you could store them in a mysql database as blob data.