You could also do that even better with plain <img> tags, so that's not really a special attack vector.