Or, in one Mastodon instances case recently, 
    because Hetzner saw that users could upload their own images

Wait, what? Yikes. I'm planning a project like that. Do you have a link to more information?