Comment 1 for bug 41835

Yes, the attachments are stored in an external system, which makes it harder to restrict access to the bug's subscribers.

This is a valid problem, though, and it should be fixed.