APEX

Hi
I am concerned about setting 'Allow Public File Upload' to Yes. Per the help text "Select Yes to permit unauthenticated users to upload files in applications that provide file upload controls. Select No to prevent unauthenticated users from uploading files in applications that provide file upload control"

That means anyone who has access to the URL can upload files of any type in to the application without any authentication.

Is this true?

Is this not a security risk in that case? Are there any alternatives which would allow 'authenticated' users to upload files via apex application.

Thank you
Kumar