Default 400MB max file size causes backward compatibility break when malware scanning is disabled #729

currently enforces a default maximum file size of 400MB when no max size annotation is configured.

This introduces a backward compatibility breaking change. Previously, files of any size could be uploaded successfully, for files larger than 400MB, malware scanning was skipped, but uploads were not blocked. With the current behavior, uploads larger than 400MB are rejected by default. This impacts existing consumers

Proposed fix (agreed):

Enforce the 400MB size limit only when malware scanning is enabled and Do not apply a default size restriction when malware scanning is disabled