Prohibiting Binary Loads on specific apps would be a nice security improvement for Qlik Sense. It's quite common to build reusable data models for binary loads but also have apps loaded with sensitive data that should not be accessible. I believe this was a feature in Qlikview but is not currently available in Qlik Sense.
I found a work around for this is to remove the Apps folder connection and create a data connection for each binary load. I don't like creating all those connections, but security-wise, it seems like a viable solution (see article: https://community.qlik.com/t5/Deployment-Framework/Qlik-Sense-Secured-binary-loads/td-p/1486144). Levi Turner comments against the article saying: "As a warning, this isn't supported due to the risk for file corruption and/or other weirdness by the Engine if it is trying to simultaneously read from and write to an app."
I don't see a difference from a standard binary load so not sure if his comments are valid.
NOTE: Upon clicking this link 2 tabs may open - please feel free to close the one with a login page. If you only see 1 tab with the login page, please try clicking this link first: Authenticate me! then try the link above again. Ensure pop-up blocker is off.