They are secure in the sense that they have a token and can’t easily be guessed, but as far as i know, the link is public.