“A company whose users request just ten images in violation of the statute would face exposure up to $5 million […]