They have a shiny file system abstraction, but ever since they introduced that, they have allowed downloading arbitrary files into it AFAIK.