I’m a bit concerned about the privacy of the attached files. Will only the sender and receiver be able to see them?
Took a quick look at the code. It seems that the plugin uses the default WP upload directory to store the files. If this is the case, then I worry that any user with access to the media library would be able to get the file.