If anything, that should have been a learning lesson to NOT trust harnesses, especially new ones.
The funniest thing is that the uploaded content is encrypted using a key that the users don't have.