It would be a massive efficiency to deploy MSC3860 to this storage provider to allow storage to be served directly from S3 servers. I would see it sending a s3 get_presigned_url() of a media file to the client to keep S3 server closed from public.