I would say the best bet would be to setup a temp FTP username/password for Qwerty and, once the file has been downloaded and confirmed, remove the file and deactivate the username. Also, make sure "Directory Browsing" is disabled. You would be surprised how many web sites you can browse through their directory tree by omitting the index.htm or through other sections of the site.