that's the key, you don't store it in the document root, you store it outside, but give rights to PHP to access that directory
and it is less server intensive to store the file in the file directories, since that is what they were meant for, MySQL has never really been good at storing binary data in the db
but mainly it is a personal preference for each person...