Hiding attachment/system fields on ticket form without js

Given the need to secure attachments in Zendesk, we have implemented format restrictions, but we cannot completely prohibit the sending of attachments, particularly via email. However, on contact forms, we wish to remove the option for users to upload attachments. We have hidden the section using JavaScript code, but our security teams, when testing, successfully bypassed the scripts and attached a file. So what does Zendesk offer to disable the addition of attachments via configuration rather than JavaScript?