With YouTube there is no issues per se with GDPR. Just tell to users that 3rd party is responsible to follow GDPR — what they actually have to do, and Youtube/Google actually do. Same thing what you have to do with Analytics, for example.TikTok is much bigger questionmark.
With images you aren’t leaking personal data AFAIK.