I see that the uploaded file's permissions are being set 0777:
@chmod($uploadfile, 0777);
I changed that to 0644 and could see setting it even more restrictive depending on how paranoid someone is about their hosting setup.
This would also be nice to have as a option. :)