The ability to mass update freely with excel files is, according to some customer admins, too much power for certain users. Even if you have server extensions blocking bad updates.
It would be nice if there was permission just like "AddFile" to allow/stop uploads of excel files in a similar way.
More generally, can we simply assign role(s) to allow write access to each entity type?
I think it is important to differentiate between uploading assets and uploading/importing excel files.
It is likely that there may be need for some people to upload assets, and others to upload/import data.