...and in this hypothetical, this person is serving them via an unauthenticated http server and hoping that clients will respect robots.txt?