Right now, if we open an image attachment in Confluence, we cannot view this image outside of Confluence.

However, if we copy the image's source URL, we get redirected to the actual image URL and it is viewable even for unauthenticated users.

It includes a token that refreshes regularly to avoid security concerns but it would be good to completely disallow unauthorized/unauthenticated parties to view these images completely.