The anonymous download allow you to get the content of a synchronizer without creating a workspace. You can let the login/password blank (or just login=guest) if the synchronizer allow guest user to update themselves, otherwise you will need to give your ID.
I agree that anonymous access is not appropriate, but this access has been made for not registered person like anonymous.