I’m curious… How does one even test such a thing before distributing it without having offending files to test against.

Like during the development process of this project, how on earth can you test it properly? 😂