[internetter]

This is actually fairly common for apps using CDNs – not just airtable. I agree it's potentially problematic

[blue_green_maps]

Yes, this is the case for images uploaded through GitHub comments, I think.

[eddythompson80]

That's not true. There is a JWT token in the url with about 5 minute expiration window.