@beadsland there is still nothing inherently more difficult about allowing audio files to be uploaded. they need no more special handling than the video files currently receive. audio codecs have /more/ browser support in terms of playback and handling APIs than video. we've been handling audio on the web since it was Sun μ-law au files. this is silly.
@beadsland and I still get posts full of characters that are unsupported on the browser/os combination I'm using at any given moment. I understand audio on the net extremely well, I've been dealing with it for about 20 years. I also built a live video streaming platform that managed to operate commercially for ten. I know it's hard to do well. I don't think that needs to be the impediment it is presented as.
The easiest way to secure a web app is to never ask for nor store any more information about people than you absolutely need to store in order for those people to successfully use your application to their satisfaction.
That should always be part of the design process for your data - what do you absolutely need to know about a user and for how long do you really need to remember it?
The smaller the footprint, the easier it will be to keep secure and so much less damaging should a breach occur.