It is simple - disable downloads by default - I do it for audio/video and even files.