I have run a Google security audit on our domain and Google has confirmed it is 100% safe, and SSL is of course fully enabled. Our product files download without any warnings via Chrome when served via Dropbox or in fact any other URL - it is only when the files are served via Squarespace that any warnings appear whatsoever. Squarespace is the issue.
Not our files, not Chrome - SQUARESPACE.