My QS team is testing an application that utilizes the Dropbox chooser. We have the option set to allow only certain file extensions, but they've found that if they select "Upload" with the widget open, and upload a file with an invalid file type, they are allowed to choose it.