Obviously no traditional access credentials are required because otherwise it wouldn’t be usable to link to (by the owner). But as with the codes you use to embed Google Maps in a website, there could be part of the URL that can be considered to function as something like an access credential.
Anyway I presume if the FBI ‘criminally charged’ the poster the charge included the criminal law they are accusing him of breaking.