At least we now know that the Files API will undergo some changes before May 2018 🙂 No more 'you can get my files if you know the secret' under GDPR