Questions about File Uploads

Currently I’m an unhappy user of Caldera Forms.
Looking for an alternative.

I notice that in order to get a file upload field I would need the Pro Version?

TWO QUESTIONS:
1) Where is the uploaded files stored & how are they protected?
i.e. If it’s a sensitive PDF document I don’t want the whole world to be able to access it from the media library.

2) Is there a way to limit the FILE SIZE of uploaded files?
This is a feature the Caldera inexplicably lacks.
Obviously I don’t want anonymous users uploading massive 10MB files to my server.

Please advise as soon as you can.