What checks do they probably have in place to check that the image isn't actually a malicious one?

Is there something that a huge site is able to implement or use instead of the checks that anyone can implement?