An uploaded file needs more than a familiar extension. The application should check the type it actually receives and accept only the formats it supports. I also consider where the file is stored and how it becomes available to a visitor.
A media library can keep an upload private until it is attached to public content. That makes the transition into publication more deliberate. The interface should explain those states so the owner understands what saving a file does.
