I haven’t used it yet myself but there is a package that lets you view all relations (which is how media is stored to content) in the backoffice!
Of course if someone actually hard links it without using a picker, then there’s no great way to check that, but this should handle most use cases I think 