We do have a couple of critical production jobs (ex. closed loop to our erp) that rely on the downloads folder, our intent is to create a seperate completely sealed off downloads location just for those jobs so there is absolutely no exposure to anyone other than the technical and data admin.