For the field of type file it allows you to restrict the acceptable file types (any, html, image) but dataforms does not enforce this restriction when someone enters the form.
This applies also to the picture field type.