Even if you use a cgi to download it, people can still copy it out of their browser's cache. All it takes is a rename of the cached file. I'm sure most flash thieves are aware of this trick.