Webforms - Is it safe to allow users to upload attachments? Is it safe to include a 'File' type field into a webform that allows users (anonymous or authenticated) to upload their files? After reading few articles on the web , it seems it makes a website vulnerable to hacking and malware.

I would like to know better about this so that I can make a decision on this and provide an answer for and against using it.
Here is a security advisory from drupal.org that explains some of the dangers of letting anonymous users upload files: https://www.drupal.org/psa-2016-003

tl;dr


Configure upload fields that non-trusted visitors, including
anonymous visitors, can upload files with, to utilize use the private
file system.
Consider forcing users to create accounts before
submitting content. 
Audit your public file space to make sure that
files that are uploaded there are valid.