I did come up with handful of thoughts how to exploit it too. 😬

Someone just takes a picture/screenshot saves it. Plugs it into a script which will just run 24/7 attempts for milking it. And the donor would struggle to find out.

But yea, there might be ways to minimize the risk, do it with non-adversary audience only, built some not protections, ..