There is no secure system and there is no point in attacking or hacking BitList.co as it provides lists and does not accept deposits. The biggest risk may be that the domain may be blocked in some countries, causing an unpleasant experience if you want to host images through it.
Well, I agree that any system that's on internet isn't 100% secure but some system have higher security than others just like this forum, multiple vulnerabilities have been patched here for many years, and new features were added in many years which original SMF doesn't offer. I believe BitList is secure enough to host and control images and it's not blocked in any country as far as I know. Since this is not a website where someone has to deposit money that's why we should not fear from any hacks.
Attackers do not just attack because of monetary gains. Have you forgotten how valuable data is in this present world? BitList listed over 100 services and there are many of us that has an account with them. If someone get hold of such data, it might worth more than the money in your mind.
For instance, do you realize that mixers correct url is verified on Bitlist?
Do you also remember that letter of guarantee is verified there.
Can you now think of how much damage scammers can do when they get hold of such a sensitive platform as BitList?