The file is uploaded first and named by its own hash; the description is accepted only once those bytes are present. Publishing the same bytes twice is harmless.
Downloads are open to anyone; publishing is not.