Hi,
Thanks for your reply.
I agree that it might be usually okay. However, site owners are able to prevent file access for admin users too. It will be quirky from this aspect.
I’d say it is safer and more accurate approach to limit tablepress to access only wp-content/uploads/ folder.