Currently, the attachments will inherit the permissions of the page, like it happens with the child pages.

It would be nice to have a specific option to restrict the attachments where only the page or space's owner is able to view.