Yep, I'll be enforcing a max file size (it's only for text-based documents). I guess my bigger concern is spam. Allowing a user to upload an "unlimited" amount of data is a DOS vector, especially since I'm the sole dev. So I'll need to do some sort of curtailing, but hopefully the kind that would be invisible to anyone using the site for its normal purpose.