While hacking the inference server via tokens seems unlikely I still remember the days that "images can't hack you" so there's that.