The plugin is fine, but still does only half of work, cause the zip file is even unprotected on ftp, so the direct download link is renamed and protected, but the absolute path is not. So customers can even download the zip if they got the absolute path for any reason.
