Three download buttons, no user agent sniffing, and a link that stops working 60 seconds after you click it

Our installers are 600MB and live in a private R2 bucket. The download page hands out three fixed routes, each of which answers 302 with a presigned URL that expires in a minute, and the object keys carry no version number on purpose.