@mima sorry, i guess i wrote it wrong, *oma implemented it already, i just never used/configured it and dont know if it really works that well...

For OP's case i wouldnt have a fear from it since every file is only accessible from a high entropy url which cant be guessed. If that happens within my instance i guess it should be purged within the orphaned object cleaning task or manually if i get asked