Hey thanks for the question! The issue wasn't that it was impossible to capture the information securely, it was that there was a decent amount of user friction to do so. I envisioned forms to be the simplest way to capture structured data and built security around it.

By contrast, NextCloud's drop would entail emailing the user a set of attributes, asking them to create a document locally, then uploading. Adding to that not every business would know how to, or want to go through the process of setting up their own web server for this use case.

My thinking is that this private forms approach would be a better default compared to email or text, which is how many businesses are handling this data today.