(1) Self Service downloads
You can configure your Brandkit account for self-service access, including self-serve registration, and self-serve download.
This means a user can register, login, find and download content from the customers Brand Portal without troubling the marketing team.
Worried about sensitive Assets. No problem just put them in a different Vault and restrict access to particular User Roles, or require users with a particular User Role to Request Assets (which triggers a secure Asset Request Workflow).