Some digging shows that tweet is totally misinformed. He seems to think that because niftygateway's json response returns an internet-facing url, that the underlying NFT must also be referencing an internet-facing url (as opposed to an IPFS url/hash). This is incorrect. The URL he's seeing in the API response is simply a IPFS proxy service offered by the NFT website. If you extract the identifier of the NFT from the url he linked[1] and plug it to etherscan[2], then scroll down to "trumpVictoryIPFSHash", you can see that the NFT is actually referencing the IPFS hash directly, and not the internet facing url. You can confirm this by plugging that value into an IFPS gateway[3]

[1] https://niftygateway.com/itemdetail/primary/0x12f28e2106ce8f...

[2] https://etherscan.io/address/0x12f28e2106ce8fd8464885b80ea86...

[3] https://ipfs.io/ipfs/QmTu6rr8o8CwbWDf2AbP13gdLFQKbqk1xaHZhFm...