Certainly whac-a-mole. Didn't mean to imply otherwise.

For myself, no need to filter them out without evidence. Keep a few controlled accounts to periodically try and see what the delay is. And get extra suspicious if all images are opened at once on a mass send out.