PDF embedded in a post is downloaded automatically by browser (Chrome) when loading stream posts.
Doesnt seem very secure, somebody could push some file to my PC, download starts when loading new batch of posts even before i scroll down to the post. So i do not know in the moment what is happening.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information