A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.
CWE-284