Should user profile images be exposed to shared proxies?