Any user could manually download your data anyways. Access is access.
And a browser can do it automated and behind user’s back.