What is the point of this view, as opposed to letting the web server serve it statically?

(It looks like it checks permissions, but if the file exists to be served statically, does this really buy us anything?)