Just like gzip, training stable diffusion certainly removes a lot of data, but without understanding the effect of that transformation of the entropy of the data it's meaningless to say thing like "two bytes per image" because(like gzip) you need the whole encoded dataset to recover the image.
It's compressing many images into 10GB of data, not a single image into two bytes. This is directly analogous to what people usually mean by "compression"