Steps to reproduce:

• Fully protect a page
• Transclude a file onto the page (transclude, as in {{File:Foo.jpg}}, not showing the file)

Expected result:

• File contents are protected

Actual result:

• No protection cascades to the file page

Not sure if this is a bug or by design, since its pretty rare to transclude file pages