Uploads in symfony4

I would like to know the best practices for uploading sensitive documents. To date, my documents are saved in the folder: Public / uploads / passport.Is it secure or should they be saved in another private folder ?Should we encrypt them? what are the securities to take ?Do you have a good tutorial because all explains uploads to the public folder ?

Thanks for your help