And kieran has a good point: if they wanted to share the link they could just save it and upload it to a public link. Just a few more steps, removing the shared secret from the fallback link would just make a bad UX for little gain.