[josephagoss]

This would only for images linked back to Pluto correct? If they simply sent an image surely they can't come into my inbox and modify files?

[lutusp]

Correct. The scheme requires some way to link the received e-mail's content to Pluto's servers. This must be so because it's not possible to delete or modify an independent email (i.e. one without links) once it's been delivered.