Really just getting the time to work on it was the most difficult.
You upload the files and in that case I do host and secure them - in that case I never let the purchaser see the real url.
I suppose I could proxy the link to other files too - New feature to work on...