Right, but with nostr: the phone will open the URI in a Nostr client, not in the browser. We can provide better UX.

Media hosts that support arbitrary/encrypted files could build javascript viewers on their domain. Encrypted pastebins work the same way. I suspect some image hosts wouldn’t want to host arbitrary data (encrypted blobs) so we would need dedicated hosts for this? An ephemeral, encrypted, pastebin-like thing for files would be cool.