mariorod's comments

As you can guess there is a lot we do when it comes to attachments to keep the platform safe, which includes having an allow list of them. Now, I agree there is room for improvement and are looking into an attachment API that will address this.

Yes, this is one of the main scenarios we are enabling in the Fall. Project tables and custom fields are already cross-repo enabled in the beta.