I wonder scanning their own uploads and validating checksums via cron job would have prevented or at least would give an early alert

Shameless disclosure: i was doing something similar (I do not have a plan to maintain long time) but would love to hear better solutions: https://github.com/getsumio/getsum