logged out users can still access files via wp/content/uploads

Hi, I’ve successfully created a file which only logged in users can view. However it doesn’t stop anyone who manually puts the media file url into their browser when logged out from viewing it, eg file here

I can see some settings in Settings –> Basic –> Access settings which automatically has the File Browser Root set to wp-content/uploads/. I’ve selected every user type here under the File Browser Access options, (assuming this is the setting that controls this?) but I can still access the media url when logged out

Are you able to help?