Security issue with comment upload / private checkbox

Using Private Upload 5.x-1.0-rc2 and Comment Upload 5.x-0.1 there is a pretty serious issue: While attaching files into comment user does have "private" checkbox, but it does not have any effect - files do not get protected!

Basically user thinks that checking private-checkbox files are protected, but they are not. Files as just as unprotected as usual node attachments which user does not mark as protected.

There is also a feature request #197591: Add "private" checkbox on Comment Upload attachments to comments, but I'd like to see this issue solved either with just telling user about this or removing checkbox in comment upload (I'll submit this issue also with to Comment upload -module, since I have no idea which one of these two modules should be take care of this).