Re: Overkill for many sites
"I wonder where FTP would be appropriate vs. SFTP"
Literally any anonymous download from the Internet. There is zero reason to encrypt publically available information, and encryption does not help with file verification. People who understand the purpose of encryption can come up with many scenarios which fit your question, while a significant number of "security professionals" are clueless and talk about zero trust to distract from their lack of understanding.