create/select a field for your collection type as media there is no limit to a file type and size.
if i use srtapi in my application with upload functionality, a malicious user can trigger a vulnerability by uploading a malicious file that leads to a remote coed execution (RCE) with critical severity, severely impacting my business.
it is not limited to a specific file type and size.