Illiterate Domine

That doesn’t look like contradictory information to me.

OP isn’t trying to install into the downloads folder; they’re trying to grant an app access to the downloads folder to read and write data.

That tends to be how things develop when you’re talking about systems. There’s not a cackling Bad Guy engineering these things, but a system of socioeconomic carrots and sticks that, right now, favor exploitation. Schools and education happen within that incentive structure so its natural that they would take on it’s characteristics.

Interesting. I set an adblocking dns via DHCP and, as far as I know, the Roku respects it. Ads are blocked and I can see it failing to delivery telemetry in my dns logs (most persistent thing on the network).

I set a rule to catch outside dns to see if anything, the roku included, has been misbehaving.