We have forms where we get clients to upload images of very sensitive information (passport, signature, etc.). We will store their written information into a database. However, there is the issue of the images. Usually, I hear people saving the images in a filesystem and having a link to it in its cell as a reference. I know I can also save the entire image as a blob in the database.
My question is on the matter of which would be more secure; both from the outside and the inside. This isn't an issue of users uploading malicious files, but more about where would I hide them better?