Correct.
It's not just the permissions (which only a few users would be able to navigate).
Google made a big mess.
And I'd rather spend my time on other things (also originating as user requests).
Please note that there is a setting to "cache" attachments on this "real" microSd card, it's in settings under "look and feel".
And most of the time, your attachments will be "cached" (downloaded, saved on the phone in a private directory, not visible to the user), even if you single tap them to view.
So the only thing missing is being able to actually "save" (put the attachment's file into a user accessible directory).