I have repeatedly explained why you see private photos on your recent images. If you dont delete that cookie then you will see them.
As far as comments the way its coded it does not hide comments on private album photos it simply pulls the latest comments. I suppose you could replace the recent comments block in index.php with this
Content visible to verified customers only.