I think the question is not about the persistence of uploaders but the safe harbor of innocent hosters. For example, hosting a password-protected binary with a

I think the question is not about the persistence of uploaders but the safe harbor of innocent hosters. For example, hosting a password-protected binary with a cleared hash is one thing. The bad actor posting a password (any password) might be another.