Does filepicker support restricting file types and validating file types? For example can I use Filepicker to bypass my own need to validate if a file is an image of a specific type (eg: png) or not?
People have been asking for extensions as well, so that's on the roadmap as well.
We have some hostname verification and we also also adding in secret keys to sign requests so we can be even more sure.
We also have some checks that look for abnormal upload patterns that have found a couple oddities and will get better with time.