
Have you considered the time-verified Redis for key/value storage?
I prefer to keep the setup as it is now. But if I will need k/v storage next time, I will use something else. And then, when it will be time to upgrade, i will migrate from minio to next choice. Or, just drop this setup and create a new one.

Theoretically .svg-s are parseable, so it is possible to prevent or remove javascript from them programmatically.