It will not be unsafe if each image/external reference has a hash, the the client can check If the hash matches before accepting the content
Discussion
Hash should be flexible, so as to allow ipfs standards, torrent, dht, etc
no this is what caused ipfs to suck having too many options, just use a single hash function have a version so you can change it later, bittorrent only went to version 2 recently
with blake3 you can verify any chunk size from 1KB denominations