[TheDong]

A website asking you to drag in a file, yet it doesn't support TLS. Any MITM can trivially modify the delivered javascript to exfiltrate the file or show a wrong identifier for it.

In addition, those "drag a file to upload" dialogs are just awful. I don't have a file explorer installed that supports dragging (I just use midnight commander). If you give me a 'browse' button, I can use the gtk file-picker to get something, but "drag and drop" doesn't work. It's also an accessibility issue: screenreaders can click buttons, but they're much worse at dragging files into specific webpage areas.