I always wonder what legal risks hosting something like this comes with. If you host a public server and uploads are client side encrypted, seems like it would be a magnet for illegal file transfer and CSAM, no?

I wouldn’t trust client side encryption with something as porous as a web browser, though. Better to use a tool that doesn’t download and execute code from the internet constantly (like rclone)