Changing user uploads to a different domain breaks old media uploads btw 😭

You have to proxy/redirect for the old ones which means you could remain vulnerable