Not to mention it could be a teaser and be incentive for them to sign up. But I agree, anyone can still get the URL from anywhere else, but simply not served on a proverbial platter. As long as the security continues to deny access to non-members or members with insufficient privs, then all is well.