Additional validation would be cheap via a max dimension field. Otherwise, we could use all the RAM if someone asked for a bajillion x bajillion image. Not likely, but possible :)