oodaniHmm. According to the Micropub spec, the URLs given to files posted to the media endpoint should be "unguessable" - but based on what information? Naming the file after a hash of its content is easily guessable if you already have the content, but pretty much impossible if you don't.
