I am not sure how direct download is problem if you replace attachment with login/signup.
I see that zip files are not supported in upload. Is this config setup or something that we will have to modify in order to attach zipped files? We could also hide links for download. Maybe that could be simpler solution for now.