Files never sit in an inbox waiting to be read

Attachments are stripped out before delivery and stored separately — the recipient's inbox only ever holds a link, never the actual file. That means a compromised mailbox, yours or theirs, never hands an attacker a copy to open, forward, or quietly alter. The file only ever exists behind the passkey-gated portal.