Presigned URLs are technically a security vuln
Presigned URLs are replay attacks by design, but object storage systems like Tigris turn this into a feature by signing time into requests. Signatures expire within minutes, avoiding complex nonce coordination. Tradeoffs include no per-URL revocation, unlimited reuse before expiry, and unavoidable leakage, but self-destructing URLs make them practical for access control.