Well that's good to know even if it's bad news. I'll keep checking in from time to time as this is a great application and I really want to use it, but I really need chunk uploads or equivalent for my shared hosting account, which limits upload file sizes and script execution times.
About the directory locations, I think you misunderstood what I was saying. I wasn't referring to the upload directories but rather the installation directories. Go to JFU on the front end and look at the page source. The flash being referenced is in the admin component directory. It's surprising to me that the flash even loads, but Joomla apparently doesn't require authentication for direct access to any of the admin directories. This may or may not pose a security problem, but I think it's probably not a good idea to reveal/provide access to the admin directory to any passing user. No sense inviting harm, if you know what I mean.
IMHO, unauthenticated users really out to be redirected to the login page on direct admin access attempts, but I was more curious about your rationale for putting the JFU flash in the admin components directory vs in the public components directory. Wouldn't it be more appropriate in the public area?
Thanks!