Downloading isn't a concern, as websites can already force you to download a file. <img src=...> The new risk is P2P connections that bypass HTTP settings, and perhaps uploading. (You could already upload by making a POST, so it's only in combination with P2P stuff that this is novel.)
If WebRTC prompted or forced use of the HTTP connection settings in the browser, I'd have no issue with it.