Indeed not enabling HTTP access on rsync.net servers makes sense, because it opens up such a big can of worms. If users want to they can use something like filestash (https://www.filestash.app/) that gives a drive-like access to storage placel that respect standards, such as SFTP. It's very easy to install on a cheap server and bridge to rsync.net without storing any secrets on that server