Theme assets served from `/uploads/` break when “Prevent anons from downloading files” is enabled

[sam (Sam Saffron)]

Thanks for the super detailed description, I agree it makes sense to do something here.