Lightweight WordPress security hardening: blocks REST user enumeration, sends security headers. Your download is delivered automatically the moment checkout completes — the download link appears on the confirmation page and in your email.