If the 2 points above are correct, would not this expose btc to a massive risk of having CP images uploaded on the chain?
There are much worse ways to push data on-chain, than OP_RETURN. For example, it is possible to use some future Segwit version, and push everything, as a continuous 4 MB witness data chunk.
Also, 520-byte chunks can be easily collected, and displayed, so even if some data will be fragmented between many outputs, many transactions, and many coins, then it doesn’t matter, because writing a parser, which will collect all of that, and display it to the user, is quite easy.