images public while STORAGE_TYPE=local_secure

I`m using envvar STORAGE_TYPE=local_secure but when i upload images they are public available at https://my.website.com/uploads/images/gallery/2025-10/imagename.jpg

I have public access disabled from settings menu.

addon yaml:

envvars:
  - name: STORAGE_TYPE
    value: local_secure
  - name: APP_URL
    value: https://my.website.com
