My understanding is, because they're kept on the disk, other apps can access them with no extra permissions - thus the reason they're "encrypted".

If you know the key, and because Snapchat will have to know where the files are, malware developers can write apps that scan the image directory, decrypt the files then send them to their own service.