Almost guaranteed it’s the site itself blocking hotlinking. The way thumbnails are fetched is from the backend, so it’s not hotlinked. We do have an image proxy that is supposed to proxy images. I do wonder why that isn’t working in this case. It might be possible to detect that the image is broken and then switch to the imageproxy to fetch it.
I’ll get to this next week when I’m back from a retreat.