What’s the suggested method to use secure images?

Maybe I didn’t detail in a proper way my question. I have an issue setting up Encrypt Personal Messages because img-src plus default-src CSP directives (disabled from Discourse management for enable this plugin).

I suspect there is something to configure enabled in Discourse as default without PMs encryption that I need to set.