Edit small. Render big.

A photo above the client limit is never held in the browser. The editor works on a deterministic proxy, and what travels to the server is the edit log — a few hundred bytes describing every change. The same WebAssembly core renders the full resolution from the original, and both sides check the result by hash.