Description to issue: https://discuss.frappe.io/t/how-to-make-image-uploads-private-by-default/127032 In terms of usability, I think we should follow the same rule as frappe framework and upload files as private files by default