I think there were cases where that was used to bypass some naive upload filters in conjunction with a back end that would detect and try to handle the attached

I think there were cases where that was used to bypass some naive upload filters in conjunction with a back end that would detect and try to handle the attached/hidden malware.