I've found that REST Upload/Delete feels worse than FTP, or other similar protocols with like 45+ years of tool development.
There was once a HTTP standard called WebDav IIRC but it seems rarely implemented. Why haven't these sites tried that direction if they wanted HTTP-Backed security measures?
Upload/Delete as REST is usable though.