This is a reasonable tradeoff. We are basically telling the download function, "Look, always perform this safety check by default, unless we specifically ask you not to."