> worst that can happen is you accidentally start a download There's a potential DLL hijacking attack: 1. Accidental download of kernel32.dll 2. Ignore, who

> worst that can happen is you accidentally start a download There's a potential DLL hijacking attack: 1. Accidental download of kernel32.dll 2. Ignore, who cares, do something else 3. Download actually_wanted_installer.exe, which finds malicious kernel32.dll in current directory instead of SYSTEM32 There are a few DLLs whitelisted for protection for this, but drive-by downloads are a real attack vector. Also in the past, exploitable bugs in the thumbnailer if you browse to your Downloads directory (e.g. CVE-2017-11421 and others on Linux).