I believe enabling lockdown mode disables media previews in messages to prevent exactly these kinds of attacks, among other mitigations.