External resource inclusions are allowed in Trac
One can include a link to e.g. image from an external resource into a Trac comment. This leads to mixed content/tracking/imagine-scary-thing. Look at #18361 (moved) as an example.
Just a link to an image should be more than enough.