4a5e9a67ca
note: if we need to keep this security, we need to store all user's images (blob_storage can be a good candidate)