Being able to easily download might be an issue in some situations. See some comments on #1386.

Maybe it also makes sense to prevent the HTTP server from serving these files as well so you can't just curl them.