The security for the downloads folder is based on the .htaccess file in the folder.