The current version of ZC is extremely secure in its own right, and if your host's server is properly secured then the risk of violation is low.

Again, allowing your site visitors to upload files ONLY when they have registered and wish to make a purchase, is the best policy regarding uploads.

Remember... You "create" an upload facility using the Attributes features.