By default, prevent attachments to be more than X MB. Then enable bigger attachments on use-case that are justified.