I support this - there are better ways to protect privacy than this from the aforementioned issue.

I bet you'll find most people habitually click to show the image anyway since it looks just like a spoiler, and very few people will know how to tell if it is a malicious image or not unless they've got the technical inclination for that.