Excuse me but these previews don't seem very secure. They're either cached or directly fetched through the user's connection aren't they? What if they're illegal files?