If its allowed on youtube i doubt itd be an issue.
I would say that its easy enough to host files on places like MEGA, google drive etc. The platform need only be a point of escrow and contact for both parties imo.
I guess for file sharing that has security that would work.
Probably a hyperlink whitelist would suffice. Transparency is needed in these situations imo. Worker milestones would be a pretty sweet feature to have