I don't think you're missing anything. That's the same idea I got. There's no mention of authentication or encryption, whatsoever. Other than the obvious probl

I don't think you're missing anything. That's the same idea I got. There's no mention of authentication or encryption, whatsoever. Other than the obvious problems with putting plaintext secrets at a publicly-accessible URL, the whole security model seems to be "we promise to delete your stuff, trust us." I find it really ironic that this is coming out right after the whole Snapchat scandal. (This is like Snapchat for documents.)