Read-Only Users (or Databases) still allowed Uploading, Deleting and Renaming of files

If a Database or a User was Read-Only, the buttons on the Files page of forms such as Client still allowed that User to Upload, Delete or Rename a file.