All (raw) image endpoints in ImageByNameController, ImageController & RemoteImageController are unauthenticated

• This allows probing on whether a specific image exists on the server by guessing item id’s (which can be done without too much trouble, as item ids are based on filepath and filename information) and then checking on what content (movies, series etc) exist on a given server, without having an account.

https://github.com/jellyfin/jellyfin/issues/5415

I’ll be sticking to Plex until it is reasonably safe to expose JF.

I know there is a lot about Plex to hate, but I am always grateful for Plexamp. It requires a Plex pass, but it’s worth it for Plexamp alone imo.