Are there any backdoors to Files?  We're looking at starting to store employee documents in an HR system on the files related list on the contact record but want to make sure security is buttoned down.  We've turned off the setting that allows users to share via link but are wondering if anyone else has had issues with any potential security holes or breaches.  Is it possible to use an API to get at the files?  We're not using the Chatter API but we have other APIs set up.