When you upload a photo, Google says that "the full photo will be stored in your profile photos album, but we will display just the square crop on your profile page." By default, the profile photos album is not publicly accessible so it was reasonable to assume that the original photos can't be accessed by anyone but you. (Update: As Brian Rose points out, the profile photos album is unlisted if you haven't connected Picasa Web with Google Profiles and it's public otherwise.)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1BQgtQdPlGRUxfNTJv391mWQGHTDL7l_56S15ZV594NVHeB5mly3mFGs8MyB4fMKVIdyYWZHuU_psaQ62vjR8ZEDB7DIrbITsJFyrC5EjvmT9IbU1Q73Mv5IH_g5tKQI-GIen2Ti_FbDc/s640/google-profile-photo-crop.jpg)
Until Google fixes this issue, it's probably a good idea to use a photo editor to crop and resize the image before uploading it to Google Profiles.