They were all sitting unprotected at public URLs, with no password or access control of any sort. If I sent you a link, you ...