Allowed file types

Hi need to limit the allowed upload file types, but “images” is too restrictive as I need to support “PDFs” as well however allowing the upload of “all” file types is far too insecure, is there a way to simply add an option to the normal allowed file types array? This is in EE4

Thanks