I went in expecting some kind of Tavis Ormandy type magic to copy files without authentication.

"You can authenticate with keys" wasn't the punchline I was expecting but perhaps if I had noticed the domain I may have set my expectations differently.