Remove or clarify the “trusted image files” caveat

One of the main features of ImageFlow is security, but this repo states:

> Production-ready for trusted image files.

Many interesting applications involve untrusted image files, and this seems like a comment that might be outdated, but I would like to check.

Locate the statement “Production-ready for trusted image files” in the repository documentation and review the surrounding security claims. Determine whether the caveat is still accurate for untrusted image files; done means the statement is either removed or clarified to reflect the supported security scope.

Written by the indexing model from the issue text.