the drawback to this type of system is that there is no way to prevent the digital goods from being downloaded by someone who did not purchase.
Even with an encrypted link, it will be the same link for all users, with no way to prevent people from sharing it.
The encrypted link in the email would work, but just be sure your client is ware of the possibility for the file to be downloaded by anybody who gets their hands on the link.