Deprecate insecure download strategies

I want to deprecate `UnsafeSubversionDownloadStrategy` too, but there are two uses of it in core and I don't know how to get rid of them yet.