> It seems like that would allow you to read any readable image on the FS anyway, which is a vulnerability in itself.

It does. You can trivially use the same feature to render the contents of a readable text file into the output image, too.