Let Drupal create the files directory instead of doing it Drush.
D8: site-install now asks Drupal to create the directory and its subdirs with mode 777. This allows web user and CLI to write to the config dirs (for example).