currently enforces a default maximum file size of 400MB when no max size annotation is configured.
This introduces a backward compatibility breaking change. Previously, files of any size could be uploaded successfully, for files larger than 400MB, malware scanning was skipped, but uploads were not blocked. With the current behavior, uploads larger than 400MB are rejected by default. This impacts existing consumers
Proposed fix (agreed):
Enforce the 400MB size limit only when malware scanning is enabled and Do not apply a default size restriction when malware scanning is disabled