Well, you can only see your own uploads and superusers can see everyone's uploads. If you have been given the permission to upload stuff you're hand curated already as a trusted person. Also, the only time the preview is shown is when opened in and then it's not served as HTML.