If you want to disable/constrain markdown/bbcode images, you can probably do it with custom CSS. You can put a max display size or completely hide the image and show some sort of placeholder saying images are disabled. It would still load the image behind the scenes though.
It should be possible to completely disable the markdown/bbcode tags using the Flarum extension API in extend.php if needed.