@Oceane fyi each instance can decide which types of file are allowed to be uploaded (.jpg .png .pdf etc) 
wonder if you have in mind specific ways to enhance the security?