Thanks for sharing this perspective! May be you're pointing toward a great zero-trust concept regarding cryptographically signed proofs of access.
In this series, the goal is much more pragmatic—focusing on standard enterprise application architecture: using presigned URLs to offload heavy file transfers while relying on native 3DEXPERIENCE system-of-record audit logs for compliance. Always more to learn on the cryptographic side, but keeping it simple for core PLM workflows here!