Yes, this is a security feature!
Some common extensions for backups, compressed (tar, rar, etc.), executable (exe, msi, etc.), and data (log, sql, conf, etc.) files, all of them are blocked by default.
You can change these settings in the Webinoly Configuration file.