Reality: A file sitting on a server in Germany is still a file. Hackers buy cheap VPS (Virtual Private Servers) for $5, upload renamed malware, and let Google index them. The directory listing doesn't sanitize the file.