Yeah that's what I mean. Downloading an image from a link generated by the LLM is following its link. Just don't do that (unless the same link is present in the source material).