Quick update:
We’ve identified an issue with Cloudfront (our CDN) not caching the .dmg file which meant ALL requests for the .dmg are coming all way back to origin / source server, which is causing these problems.
This appears to be limited to just the .dmg. Windows MSI and actual download files seem file.
We are talking with Amazon about issue.