Won't most people just share the links over email? With the decryption key in the url I don't see very good security guarantees here