The template for images appears to be using ezroot, not ezurl.
I need to use URLs that include the server/host name (e.g., https://lpdaac.usgs.gov) in them in order to get rid of the "insecure items" warnings. I've done this in other templates by doing something like this: