noone can upload any file to you... you have to download that file first so people can download it off of you. thats the whole p2p concept... sharing
and no, the browse host feature should not be removed nor password protected. this keeps the network moving forward.