Currently Webform file component uses public files as default upload destination. This is probably because private files path is not always available if not configured in Drupal settings correctly.
File upload destination should be made automatically "private files" by default if available.
I found same issue with Drupal7, is there any patch or way for Drupal8?
Or better if we do it by some setting in the local.settings.php or some similar cofniguraions?