"I run a website where people can upload files."
This is an incredibly brave thing to do in 2026.
/shrug - I have an end-to-end encrypted file delivery service. It's a dumb service. If the box got compromised, it doesn't even matter. The files can't be read or stolen because they would have to actually crack the algorithm... which if they did then it's just over, the internet is plaintext again if people are able to defeat what's been recommended as best practices for SSL/TLS these days.
I didn't newly start this in 2026; I just haven't stopped the existing system :). Fifteen years ago there weren't all these issues though. Attempts at taking it down whenever anything bad was spotted started probably somewhere around 2019-2020, and user reports are picking up as well since about a year. People suddenly care a lot more that when they guessed a url and found malware (something no legitimate user would stumble upon), it gets removed promptly. So far the number of reports is very very manageable, but it's interesting to observe the collective consciousness change over time from "don't run executables that you don't know are safe" to "untrustworthy files shouldn't exist online in the first place"