@eviljeff yeah, that's what I was worried about too. But below it uses `self.status` as the status filter. So if app is public, it only finds versions whose files are public. Which is what we want.