Attachments made in a comment become a top-level attachment, leading to confusion.

It breaks expectations of the person who comments for a limited audience, plus is notifies broader watching audience of newly added attachment with 0 context

Suggestion - introduce a mechanism to link attachments to a security level of comment in which these attachments were added.