README: Explain thumbnailing security model

Thanks to Simon McVittie for the original writeup.
1 job for master in 6 minutes and 12 seconds
Status Job ID Name Coverage
  Test
passed #911993
build_stable

00:06:12