As I said, services should proxy the image. That way they can strip out anything untoward.