There is a site setting prevent anons from downloading files that you can flip on for lightweight protection. For heavierweight and much more complex protection server side, see Secure Media Uploads
6 Likes