It would be a good feature to be able to restrict what file types can be used, with a default setting in core plugin administration possible to overrun by the course administrator.