Using shortcode gives access to protected files for all users

Hey,

If I use a shortcode to create a download link for a protected file (ie. “Members only” checked), it’s apparently accessible for all users, logged in or not.

Is this intended behavior, and if so, what is the reasoning? It effectively renders the using the shortcode option for protected files moot.

Thanks!