From Dev.to
SaaS Image Exports: 4 Object Storage Controls for Private Thumbnails and Signed Links
Short answer: keep private product originals and generated thumbnails in object storage, run image resizing in application code or a dedicated image service, and issue short-lived signed download link...