Frustratingly I couldn't reproduce this and the bandwidth-using part of the IPFS daemon appears to be completely opaque - i.e. I had no clue what was using all the bandwidth (other than the fact there were 200+ connections).

No visibility into an app means it's unlikely to stay on my system.