[tomasyany]

Every uuid image link would be public, but virtually private. You would need to know the exact link to see the image.

Can't see how this is different from images stored in FB or other services.

There's no reason to panic, guessing the URL's is (virtually) impossible.

[jdnenej]

Exactly. If it's a long enough url then the url is basically a secure password.