The server stat software tells that this plugin's csv file has a lots of access. It does not tell where they are come from nor have a user-agent.
When I type the url like site-url/wp-content/plugins/paid-downloads/css/style.css, the file is visible.
Is it intentional? Or am I the only one having this kind of issue?