This is actually something that I'd second as well. Since our business is retail, sometimes we have customers who will send sensitive information back. When it attaches to their order, that attachment is visible for any and everyone. While we thought being able to delete the attachment would work, it doesn't, because it's still being stored.