An undesired image that should not reach the intended recipient is not detected by Image Control in Email Security.cloud.
Email Security.cloud
Messages sent to Image Control administrators are being delivered by design, as administrators' email addresses are exempted from the Image Control service.
This is to ensure administrators can review suspect content without being blocked themselves.
For other issues with Image Control service, refer to the article below:
Troubleshooting Image Control issues