@burner_ger. Thanks for your post. Yes, the plugin list files and those files can be accessed through their direct link. This is how it was designed. As a module (or even the plugin version) it can’t really be used to secure access to the files.
However, I am on the verge of completing a component called “Advanced Folder Listing”. It will allows controlled access to files and secure viewing and downloading of files. I hope to release it at the end of the month.