I would limit the alternative image to the original pubkey, to avoid a "content attack" to falsify the original.

Think of what could happen if tomorrow nostr.build went offline (I wish you long life!), chaos.

Or at least give priority to the owner of the note.