Share public link is a great way to showcase your model to customer or whoever you want without any risk of it being downloaded or altered.
It's main goal obviuosly is to SHOW model, NOT to INTERACT with collegues.
So my idea is that download permission should be switched off by default.
It's something that should be explicitly turned on by user.