Download vulnerability caused by recet update

Removing download dialog is major security issue and it should be put back (in default setting) immediately.
It’s make DLL hijacking and other stuff so easy as it was back in the days of old IE. sites now can put anything to download directory without user even noticing. other browsers that act similarly at least show some more visible notification for current/completed downloads. (and still gets a lot of hate, though mainly because it usually causes more inconvenience than benefits, even in normal use, not just in security. )