While other comments about security may be right, it probably isn't a reason not to pursue this. It's a great idea and very worthwhile pursuing.
My main concern is over using hashes as an address. A hash isn't a unique address but I haven't seen any mention of protections being built in to protect against the risks of downloading different files with the same hashes.
Searching for "ipfs collisions" returns this IRC discussion, in which joeyh makes the same point: https://botbot.me/freenode/ipfs/2015-03-05/#33399953 (search for "collision" if it doesn't appear immediately).
My main concern is over using hashes as an address. A hash isn't a unique address but I haven't seen any mention of protections being built in to protect against the risks of downloading different files with the same hashes.