/private and /private/tmp are shared between all users (including non-login users). $TMPDIR is safer for sensitive files, but it lacks the macOS sandboxing protection on ~/Downloads.