easy to have false positives, and easy to counter.

shift everything 1 bit, literally and suddenly the control block doesn't get filtered but any client can still render the image

if that gets stopped somehow, you just xor the block with some value, or a bunch of other similar things

it is not possible to stop this.