Attachments available to any user with link

What if the same attachment link appears in both a public and a private topic?

I’m just not convinced it is the role of the topic to enforce this, I think attachment permissions should be specified elsewhere.