You're 100% right — thank you for pointing that out so clearly. I completely understand the concern.
Forcing users to upload PDFs to an external site (like Google Drive, Dropbox, etc.), then linking back, does introduce risks:
Dependency on third-party hosting (what if the link breaks or the...