filename *should* embed the data.  There is no guarantee that files are actually local (they could be in `/tmp`, in which case they are not actually accessible with the `files` url).  If someone wants to use `files/` url, they should specify that with the `url` field, rather than the filename field.