Thanks for your replies.
The privacy and security concerns are following the requirements from the security team stating that, in our cloud context, no attachments must be stored in Pega.
In fact, the attachments when added to the case are directly published to a DMS (Document Management System) when added during case processing. That is handled through a custom functionality developed to allow that.
The business is interested in using Pulse as a collaborative tool on the case but allowing operator to add attachment is contrary to the security instructions.
Actually we managed to hide that attachment button using the pyC11nCustomFonts css text file as a workaround.

Do you see any constraint or risk by hiding that button this way?
Thanks for your help!