The question remains -- why expose tourists to this danger in the first place?
It's easy enough to distinguish between a tourist flight and a professional photo flight, which is where this NYON company seems to be blurring the lines.
A tourist flight is one where the company pilot flies a pre-determined flight path, probably the same one every day. The pax are along for the ride.
A professional photo flight is one where the client consults with the pilot, sets the objective and flight path (within operational and safety limits), and the pilot follows the client's directions.
One of those situations should have pax belted in their seats without a harness for hanging out the doorway and taking selfies and pix of their feet dangling. The other should have good harnesses and people who know how to use them, probably not for the first time.