This would be better if the site was served over HTTPS. At the moment anyone could MITM the Javascript to steal the file's contents.