Every remote image is held until you ask for it, then fetched through an authenticated proxy that strips your tokens, referrer, and IP. Suspected tracking pixels stay blocked even after you load the rest.