Thanks for the update!
I am building an internal Discourse for my company use. Same time bringing our instructions, todos, other stuff and our chatting to Discourse.
Now I am getting uploads for chat using the DISCOURSE_ALLOW_UNSECURE_CHAT_UPLOADS env setting. And I instructed that nothing private files/images should be shared using chat. Since this is internal only and forced 2fa and only employees use this Discourse this is fine.
Chat usage is discussing projects/coding/personal stuff so mainly sharing images using chat (photos of issues, personal stuff etc.).
So it is not “business critical” but really nice to have since topics are using secure uploads and it would be great that chat messages used the same logic.
Still. Keep up the great work!