Steps to reproduce

1. Go to Media -> Images
2. Create the new image
3. Fill required fields
4. Select non-image file, for instance, a .php file ¹
5. Try to publish content

Result
After the first click on publish, page will reload but nothing more happens. There is no error message.
After the second click on Publish, content will be saved without any file.

Excepted result
You should see some validation error on the front-end.

Note:
This is not a security issue. Finally, the non-image file won't be saved to the storage directory. It exists in the /tmp directory for the short time only.

¹ - probably you need to change filetype setting in your's browser file picker window. See screenshots in the attachment.