yknow, the funniest thing about the whole "oh cohost can leak your ip to users!!! don't use it!!!" thing is that people assume that this isn't the case on other sites.
i occasionally do security research and found a funny little niche: security mechanisms specifically on social media, and good god, you would not believe the things that ive seen. the exact same thing does happen on the other sites too. twitter is like swiss cheese in terms of security features, reddit should not be allowed to use regular expressions (you genuinely would not believe the regices ive seen in prod), etc etc. they are all insecure.
if your IP is part of your threat model, use a VPN. all websites are leakier than you think, and social media sites are some of the worst offenders.
don't worry about hotlinking on here. we already live in hell and hell is hot, so we might as well have some fun with it
