Exactly!

Maybe a better alternative would be allowing clients to set a media proxy.

The proxy can generate thumbnails and hide the client’s IP