Uploaded files are accessed via PostNuke's standard index.php file and thereby through Pagesetter. This has two implications 1) files are always subject to the same access control as the publication it is stored with, and 2) data must be streamed through PHP, generating a performance overhead comparing to linking directly to the files. It is the developers opinion that complete access control is more important than performance in this case.
Template courtesy of Designs By Darren.