That is not true in several ways. Iframes and cdns work. There are security measures that prevent https connections from embedding http and other content restrictions, but those are for security reasons. People hotlink images, it's a wild web out there