File attachments in restricted categories should be restricted

Most likely yes.

The plugin you mentioned is different in that it’s adding a paywall.
We just want to prevent the download when you don’t have the permission to.