it is not the real deal - since many people post their real pic - location voluntarily themselves - issue here npub-ip mapping (any exit ip) - using craft url embedded in picture - in DM - can do it outside of DM - not sure
most app default settings - keep images blur/ not load from global aka "not following npubs"
nothing special needed except user education/awareness for now
everyone donot click READ from unknown npubs in DM when u dnot wanna reveal current exit IP <-> npub until u turn some condom like tor/vpn/proxy
Notes by stc | export