I guess there are approaches that could be implemented that would guarantee that (future) images are never deleted, but I wonder if it would be too complicated in terms of usability?
Could you not make a 'post picture' facility where the image went to the archive in some form?. Anyhow we have done quite well in the past witout pictures, so I would not sweat this one too much.

Erik