You can do everything server side without re-uploading data.
But if you are ok with unencrypted names it is also OK - it is really your call.