[iomcr]

Fix this easily by abstracting the manipulation of user uploaded files to chroot/serverless.

[lmm]

That doesn't fix the problem. The process can still fix any data that it has access to, which includes other users' confidential uploaded files.