No security all files avaliable to everyone

Hi,

I have assigned only administrator only for the file permissions.
But I can still view the PDf files.
These files and their directory were uploaded view FTP. and I did the sync they are all listed.

But how can I make them secure?

Also any custom templates I create does not work.

https://www.ads-software.com/plugins/wp-filebase/