You don't have to force them to use FTP. It is easy to set private areas on a site, which can provide the usual browser interface, but just need a password to enter.