Hi George,
In our case, all the contents are sanitized before saving(BuddyPress handles commenting/post sanitization of activity entries) and we do not do much with the input. For the output, we have partially sanitized as the assumption is all inputs were sanitized while recording.

This will only be problematic if something was imported via a script without using MediaPress functions. For now, I don’t see any reason for us to worry about it. I will update the lightbox in next release too.

Regards
Brajesh