Just a heads up. In the 3 hours this feature was enabled on our production instance, before emergency disabling it, Confluence had sent over 16,500 email notifications regarding attachment version deletion.
This functionality absolutely needs improving and by default to not send notifications.