This does not happen. The model is not downloaded unless the user intentionally uses the feature that requires it. Then it's downloaded at that point.
That that feature (a) requires a local LLM, (b) will install a multi-GB download without telling the user, all happen without any explicit user consent.