The whole point is that SVG images are basically never loaded with the embed tag, which is the reason why this is innocuous.

Embed is basically like using iframe, so where one is blocked, the other one is too.

The author simply loaded the SVG via the image tag, which renders it inert.