A lot of people here are telling you to do stuff, but not really explaining "why". A different suggestion would be to build a threat model. Who are your uploa

A lot of people here are telling you to do stuff, but not really explaining "why". A different suggestion would be to build a threat model. Who are your uploaders? Who are your viewers? What are the threats? Only when you've figured out what the threats are, can the solutions make sense. Internal site? Internal users? Publicly available upload link? What media types? .... Threat modelling is a thing that adds lots of value (imho) when thinking about adding new capabilities to a system.