Although it's not air tight the reason the name isn't given is that then users could bypass the download script with a little effort on their part. Clicking on the link to the attachment enables the download script to check the access of the user before transfering the file.
More could be done to really make this a lot more secure at some point. I'm looking forward to that time.
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.