Phishing
Attackers can host a malicious file onto their notion page, make it public, and then share the download link of the file to target users. Note that Notion restricts certain file types.
Download
Attackers can host a malicious file onto their notion page, make it public, and then use the download link to drop files onto a target machine.