Not sure you should be doing it this way, but you can distill your code into:

$stmt =~ s/\?/shift @bind/ge;
[download]

or with quotes