I think it would be better to unblock the downloaded file. In that way, you still avoid to run files that were downloaded and you do not want to run. Now, you just allow any executable to run.