There are some good reasons not to send sensitive documents as attachment in an unencrypted email. But this is exactly what Filr does. If user A shares a document with user B then user B can activate a subscription to get an email with the changed document as attachment. Imho this a very serious security vulnerability as neither an administrator nor the file owner can prevent/control this. I would suggest to enable the administrator to completely deactivate this function.