OK, I understand now. Thanks for the info!
I worked on a web-based file manager for a hosting company years ago, and we uploaded files to /tmp/ and then moved the files from there, rather than uploading directly to a directory. The app may have been run as root or as the owning user, though. I wish I could remember more clearly!