Preventing Malicious File Upload (PHP) false positives w/o exposing system

Users on our site are not able to upload PDF documents without triggering the “Malicious File Upload (PHP)” firewall rule.

I’m aware that I can work around that by disabling the rule. What I want to understand is whether that would simply eliminate malicious file upload protections going forward.