I saw this asked somewhere else recently, because that field type is not allowed on public facing forms. I suspect NetSuite doesn't allow this because they don't have a good way to make sure that malicious files are not uploaded to your account. You could probably do this with a public facing Suitelet, but IMO you're opening yourself up to risk if you allow anything to be uploaded to your file cabinet from the Internet.