Only allowing one time downloads seemed reasonable to stop 1 and 2 stage payloads. Doesn't help exfiltration, but theres so many options for that anyway. One

Only allowing one time downloads seemed reasonable to stop 1 and 2 stage payloads. Doesn't help exfiltration, but theres so many options for that anyway. One time downloads may be annoying for non-web savvy people, but seemed like a reasonable tradeoff.