There should be a configuration option for bandwidth throttling, whereby an administrator could (possibly on a user-by-user basis) limit the bandwidth available for downloading files.
This would protect against leeching and against the monopolization of bandwidth in a concurrent-user situation.