If there's a setting that exists for this they sure did a good job in preventing anyone from finding it. The UI referenced in previous posts I've searched for on this subject seem to be outdated. Revoking "Device Upload" permission entirely is not a solution.