upload first process second was the default for so long that users stopped noticing the upload at all. we built swapfile.live around the flipped model - browser does the work, nothing leaves the tab. the trust difference shows up the first time someone converts something sensitive. great breakdown of the shift