There's a name for this: steganography
For a regular joe the biggest risk is probably just losing your media where the hidden data is stored, for reasons entirely unrelated to a threat actor