But there is nothing to MITM here, it’s a link to a file. Either you trust the person posting the link or not, but the host and the protocol are irrelevant in that case to evaluate if it’s safe or not, period. It’s not that people are challenging details, it’s that your concept of holistic view makes no sense here, there is nothing to add together.

Also having that wrong mental security model makes you more vulnerable (i.e. you’ll be less on your guard when seeing https and a reputable host, where you shouldn’t and apply the same level of scrutiny).