puzzles on Nostr: No because you need to sign an event with your keys to change the media with ...

No because you need to sign an event with your keys to change the media with Nostr.build. So “you”would need to get hacked.

Primal is constructing a different event and swapping media URLs. That new media url doesn’t require your signature to change.