This is totally wrong. Once you have RCE, you can upload code the same way you're executing code.