Cloudinary's upload guide describes unsigned presets and their restrictions. For Cloudinary Cloud uploads, knowing a preset name is not proof that a client is an authorized application user.
Choose the upload model and restrictions deliberately. Test allowed media types and destinations before exposing an upload flow.
Akousa