With the new media manager it is possible to download or delete any file
You can say its a stupid user issue but we know users are stupid
Edit; ah I see by "everything" you mean you can manipulate to delete xml/php as well as images, and not as the above issues, delete "everything" with just two clicks
Note that if you delete a FOLDER that contains xml/php/pdf and images, REGARDLESS of the allowed file types, ALL the files are deleted from that folder...
No Code Attached Yet
Actually some of them, yes. ;)