@underlap @jec Check the privacy settings on the image. They're separate from the privacy settings on your post.
There should also be a "Make all posted pictures accessible" option you can check under "Security and Privacy Settings" that effectively makes your non-public images unlisted, but still viewable if you know the URL.