Also, in some orgs you physically cannot send the cv.

I can't send or recieve documents as email attachments anymore to external stakeholders, everything must be via sharepoint link.

That, plus a decade of compulsory anti phishing training means no half competent HR person should be blind opening an attachment that says 'CV'.