If a library has EnableBorrowerFiles set to allow, there's no mechanism checking what types of files are being uploaded. It would be great if that could be configurable with a choice of options (.pdf, .doc, .odf, .html, .gif - as a top-of-brain list).
Sounds like a good idea. File extension checking is limited in value but I think it's certainly better than nothing.