It’s there for me. It seems like they took away the “View image” option, which would open the image in the same tab rather than a new one?

The feature would likely need to be enabled to take advantage of such vulnerability in said feature.

I mean, there is a single button to disable all AI

Should be 87 cents USD. It is a 1.111B class domain https://en.wikipedia.org/wiki/.xyz

As far as I know, you can not change the authoritative name server for domains registered with cloudflare (probably not a big issue for most people)