I've met a few where it's not explicitly required on download (e.g. GitHub has their SOC2 available for download on the enterprise admin page, but by the time you're using GHEC you've signed a few pieces of paper), but agreed that most companies aren't giving them away for free.

Those systems tend to stamp your account information into the PDF, as well.

Yeah I was trying to make a joke that didn't land I guess.