I did come up with handful of thoughts how to exploit it too. 😬 Someone just takes a picture/screenshot saves it. Plugs it into a script which will just run 24/7 attempts for milking it. And the donor would struggle to find out. But yea, there might be ways to minimize the risk, do it with non-adversary audience only, built some not protections, ..