We do have mechanisms in the IDE to allow for downloads using HTTP and those can be disabled by setting the allow-file-downloads flag. You may also want to disable publishing to RPubs and to shinyapps.io, which you can do by setting the allow-external-publish flag. See the admin guide here: https://docs.rstudio.com/ide/server-pro/r_sessions/feature_limits.html).
How to disable data export in RStudio Server and RStudio Workbench?
