TL;DR: Moderate an edtech avatar at upload, publish a new opaque asset key only after approval, and replace the profile reference with a tombstone before deleting bytes. On-demand processing is the runner-up for private drafts and rarely viewed images. A versioned URL prevents a replacement from colliding with an older representation; it does not, by itself, make an already shared URL stop loading. Decision Upload-time processing On-demand processing Before an avatar goes...