points
And for non-malicious content, you can drop file above the upload max limit before user wastes time sending the file.