All major file/image upload services use signed URLs to prevent this. It's a minor abuse vector and not much of an issue. Cloudflare started as DDOS protection

All major file/image upload services use signed URLs to prevent this. It's a minor abuse vector and not much of an issue. Cloudflare started as DDOS protection and should add similar features rather than limit functionality.