I use Supabase Storage. It does S3-style signed download links (so I can switch to any S3 service if I like later).