Is using a GUID for an uploaded filename secure?

[Vitaly]

@fefrei

Both models hinge on the assumption that some string is not guessed.

No. Link with public access will be shared in unpredictable ways. You can not provide security at this step. So, you can not rely on assumption that your “secret link” will be secret forever, this can go out of your control.