When I look at extra red files by exploring the Incomplete folder I often find they are Previews (which should be deleted once the download is complete).

I did notice that some non-previewed files turned red occasionally. It seemed they were coming from a firewalled host, or a non-Latin script.

I never did track it down, but will try again.