I think many people will agree that this is just terrible engineering and there are many ways to authenticate users who download files without the use of 3rd-pa

I think many people will agree that this is just terrible engineering and there are many ways to authenticate users who download files without the use of 3rd-party cookies. Literally every other cloud storage provider was able to figure that one out.