This is a weird take.

For example: From a security POV it’s not meaningfully different from being given a download link for a binary.