Ok, I found the bug and circumvented it.
I provided my own Thank you page (no download code) and removed the link that page (or any think you page) from the invoice email that buyers get.
(Buyers get a receipt from paypal, then an invoice from EJ, then a D/L link from EJ).
So the bug is probably still there, but I just went around it.
Case closed for me/watch out for you!