Yes, but let me ask you a question as a potential user first... Would you be willing to give my webapp access to your S3 account (read-only)?

I'd of course not look through the content your files (only the filesizes)... but you as user would have to trust me not to do that (unless there is some s3 permission level I am not aware of).