`settingcontent-ms` files lacks "mark of the web" => execute code by dbl click in Downloads toolbar

`settingcontent-ms` files allow launching any binary with any params. Brave doesn't mark `settingcontent-ms` files with "mark of the web", so the file could be executed by double click in "Downloads" toolbar. Launched `settingcontent-ms` file could lead to code execution with user-level privileges.