Simple question, right? Just serve, no uploading.

Common aproach: just do <Image src={objectURL} />
- Malicious actor can grab that url and spam it 100000 times, costing you a lot of money

So, generate presigned URL for GETing the image?
- Maybe good, but the URL will be useless after some time, as the next/image cache will bust after some time, so all the image links will be broken

Using a CDN with rate limits fix those issues I think, but makes the system more complex (and pricy)

Any ideas?