According to this page it says you should not use file manager for sensitive files because they are uploaded to a publicly accessible CDN. However earlier in the docs it says that if you set hidden to true, you can use them only for attaching t
read more