Image source path - secure way
check_url basically checks for dangerous protocols in the url and escapes any special characters as HTML entities for output. Normally it's not needed unless outputting a raw external / absolute URL. For relative URLs, Drupal adds the base url automatically.

better to use first(a) option.