Offtopic question. All Instagram images and videos appear to be hosted a publicly accessible storage even those of private profiles. You just need to know the URL. Is this security by obscurity really enough?
https://scontent-arn2-2.cdninstagram.com/vp/5932ec6f480e416a...
It's not obvious how likely it is to guess a valid URL, but even if it's just the first path, its still 128 bits (assuming a hexadecimal alphabet). According to [0] there are 50+ billion photos uploaded to Instagram. Even if we assume 10 000 billion posts (200x margin), 10^13 is a very small number in comparison to 2^128≈3.4*10^38,
[0]: https://www.omnicoreagency.com/instagram-statistics/
(In the the URL above I've changed one character, yielding it invalid, leaving it as an exercise for the reader to figure the missing one out.)