Discourse is not in any way intended as a file hosting platform, so security > hand wavy SEO in this particular case.
Also I’m pretty sure DropBox et al do not work this way either so the argument that it should include the filename in the URL is pretty weak?