Currently files hosted in public spaces that have access control through magic links can be downloaded by anyone that has access to the file link.
You can use other methods of protecting the public pages like Guest accounts or Password. See more here: https://docs.archbee.com/authentication-options