Are they embedding it directly from here? We should have protections against that now. If they're not working, that's a problem.
On the other hand, if they're copying all the files over, that's more tricky. Not sure what you could do.