You’d also want to require the client to convert to webp and limit width and height