Hello,
Thank you for taking time to check.
After checkout, the download link for the product sends you to an open ebook page in the browser with the full path URL. Anybody with that link can get free access to the file. I expect that the link is hidden to the customer and only served with the download.
See screenshot https://prnt.sc/tn7t1w
Also, I just realized the .htaccess file in the woocommerce uploads folder keeps changing to “deny from all” by itself even after changing to “allow for all”. This results in the error 404 page I first mentioned when download link is clicked. https://prnt.sc/tn7oo8