Biggest question marks:
- is transcoding everything to WebP a big deal?
- do we care about allowing uncompressed uploads just with stripped exif? Passing through media scares us
- how do we sandbox it
- how the fuck do we handle videos (well there's only one choice here but how do we avoid fucking up hard)
- and animated image formats
