Wlcm. Steemit is hosting the images if you are viewing it through Steemit.com. If you view through a non-Steemit website, it will pull the raw text from the blockchain. In those cases, technically those sites are hotlinking. That is not Steemit's job to prevent though :)