Access client portal while not logged in

Hey I can access my client portals while NOT logged in. Thats weird! If you go to https://dev-rcr-6328.pantheonsite.io/investors/test/ you can see everything. /investors is the path chosen for the client portal and /test is the username. I was under the impression that any “private” pages would be just that… private.

The page I need help with: [log in to see the link]