this is probably the most convenient for record keeping purposes, but no. even data objects are subject to RLS, so you could get away with just setting rules on your DB to only let the user see his/her/their files
Is it relevant to do as for users, i.e. to replicate in a public table the uploaded files in the bucket, in order to bind them to a collection and display them?