Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
I think there should be a permission to disable a file owner's ability to change a file's name or permission (role permissions etc). The right click popup exposes these permissions for the owner of the file. This would be so a site could create a read-only file browser.