You could just serve a normal HTML page that already includes these links, and you don't need browser makers to add code to support your DDOS vector.
Difference being is that one could inject 103 <download Y> for any resource, not just web pages, amplifying the outgoing traffic. Plus content doesn't need to be modified. It would be nice (I haven't read the specs) if 103 was restricted to HTTPS only for example.