Seems logical.

If we encrypt everything we don't need AuthN/Z.

Encrypt locally to the target PK. Post a link to the data.

What? I work in this field and I have no idea what you mean. (I get the abbreviations like authz and pk, but not how "encrypting everything" and "posting links" is supposed to remove the need for authentication)