Definitely! That’s why we supplied a file host that also controls access in the same way.

If your note leaks to other relays, the file/media links in your note will NOT work for unauthenticated users.