The value of Gumroad is certainly the software for the end-users.

End-users don't care about validating uploads.

But validating uploads is a necessary evil in order to sustain the business.

All user input is evil, but especially so when they have a free-for-all "upload" field.