Security Concern – File Upload field

Hello Support Team,

I found a security/privacy concern regarding the File Upload field.

When users upload age identity documents through the File Upload field in registration form, the uploaded files are stored under:

“/wp-content/uploads/ultimatemember/”

These files can be directly accessed if someone knows the URL.

This is problematic because these uploads may contain sensitive personal information.

Could you please advise if there is a secure way to:

1. Restrict file access to admins only
2. Store uploaded files in a private directory
3. Generate protected/signed URLs
4. Add a privacy option for File Upload fields

I believe many membership sites use Ultimate Member for verification purposes.

Thank you.