Serious security issue

I’ve been using this plugin for a long time, but right now I realized something that might be terrible: The backup file is directly accessible, so a possible attacker might open your backupfiles if he find a way to scan your folders. Please fix this, or give the site owner an option to change the backup directory to the directory outside public_html.

https://www.ads-software.com/plugins/simple-backup/