Protected Download enables downloading of resources to the device with support for a binary transparency log based verification, ensuring these are the official resources provided by Google.
This API is used to deliver sensitive models/heuristics to Private Compute Core apps. The mechanism of download is open-sourced to show that through the connection to the server personal user data is not sent to Google, but rather receiving the model or heuristics in an encrypted and verified manner.
As a first use case, this API is used by Google Play Protect Service. As Google Play Protect Service keeps users safe from malware, the models and heuristics themselves need to be protected from malware authors.