This is basically the same issue as https://www.drupal.org/node/807126 that was filed against the D6 branch of ImageField. That issue was closed as "fixed" by @quicksketch by pointing to the ImageField Tokens module:

Now with Tokens in core, it makes sense to take advantage of them and use them where possible.
PS: should support transliteration once in core (#904)
PR by @BWPanda: https://github.com/backdrop/backdrop/pull/3068
Recent comments
Hi ian, so, in your case all the other admin pages work fine, including the status page, only admin/reports/updates fails? But you can access admin/reports? Weird... I...
Update Report thows "Access denied You are not authorized to access this page."
The File (Field) Paths module should be able to move existing files. I've not tested it, but the module description says: Retroactive updates - rename and/or move...
Moving from /files into subdirectories
Yes indeed. We are exploring a few other more costly options, but as we are a low-resource start-up, we could save a lot of money by integrating Backdrop, CiviCRM and Ubercart for our membership...
UberPOS for Backdrop?