Secure storage for file attachments
There is a special permission for accessing user file uploads in CiviCRM. You can turn this off for Anonymous user and I believe your files won't be accessible for Anonymous users.