> SFTP can be used for similar functionality, but it requires users to have SSH access.

Security-wise you set it not to run commands (and maybe chroot) and you're done, right? And difficulty-wise isn't granting SSH access very similar to FTP access?

I don't understand the issue.