Seem totally fine to me. As long as you can rollback if the download is truncated or the crc checksum doesn’t match.
which wouldn't exist if the api is simply just a single CSV file?
at least with a zip, the CRC exists (an incomplete zip file is detectable, an incomplete, but syntactically correct CSV file is not)