This “linking vs hotlinking” distinction is pointless. It’s an image sitting at a URL. A browser can request that image and display it. If you don’t want people to view images you publish publicly, then don’t publish them or require authentication in order to request them.