Firewall Rules for Graph API File Downloads

[correct-coder]

In the Graph API documentation, when sending a download request to the Graph API, the response is as follows:

HTTP/1.1 302 Found
Location: https://b0mpua-by3301.files.1drv.com/y23vmagahszhxzlcvhasdhasghasodfi

I have two questions:

1. Want to confirm whether allowing access to *.files.1drv.com is expected and secure when using the Graph API for file downloads.
2. Are there any official recommendations or best practices for configuring firewall rules to ensure file downloads work correctly with the Graph API?

Thank you for your help!