Files are encrypted at rest, but no end to end encryption, you're right.

Ok that’s the same as Firefox send then. The server operators can’t decrypt the files without the key contained in the url, at which point the file is decrypted and transmitted over https.