Run File Browser against a test directory and create separate admin and limited accounts. Try upload, preview, download, rename, and deletion, then verify the limited user cannot traverse outside the assigned path. Test a large upload and a restore of an accidentally removed file.
The service sits directly in front of valuable data. Use TLS, restrict exposure, keep backups independent of the UI, and audit who can create shares. Convenience should not weaken filesystem boundaries or make deletion irreversible.