Absolutely a mod can remove it, and absolutely they have reign over this site; but by the same token the mod could remove the harmful hyperlink, yes? Either way, the mods will be able to control what is on the site whether it be a physical attachment or a hyperlink.
Edit:: And I would go so far as to say that a harmful hyperlink is much easier to spot than a harmful file, imo.