On Portal, delete the attached file of [Note], add a new file, and sometimes the previously attached file is downloaded due to the remained browser cookie.

If the former attached file is downloaded due to the cookie, it is unsecured.
Always the replaced file must be downloaded.