Summary

import urllib.request
path = "https://example.com/data.csv"
urllib.request.urlretrieve(path, "data.csv")

This currently raises suspicious-url-open-usage (S310), but it should not because path can be inferred to have Literal['https://example.com/data.csv'] type and that's safe.