i think blossom gets a bit misunderstood here - its not just a random decentralized storage, it clearly exposes the person hosting it so you have the same problem with this as having a ftp server.

nostr solves discoverability to some extent since people could mirror blossom servers and they could keep popping up, but unless they are tor only its just a whack-a-mole game

its clearly doable, theres large projects like a annas archive and libstc doing something similar with different approaches to discovery and hosting, but the file hosting is a very big part of this problem