Any user facing documentation that includes the phrase "Ensure the files are not malicious or untrustworthy" and provides no guidance on how to do that is really not fit for purpose