No because you need to sign an event with your keys to change the media with Nostr.build. So “you”would need to get hacked. Primal is constructing a different event and swapping media URLs. That new media url doesn’t require your signature to change.