This bug is well known. We need BLOCKQUOTE, actual heading elements (perhaps just H2 through H6), possibly a few more.

However, enabling the IMG element is dangerous, as MetaFilter has learned the hard way. One can encode JavaScript exploits in URLs or the src of an image. Limiting images to attachments (kind of odd for a Web site, less so for a discussion forum) is a reasonable compromise.