Never use the "public link" option for entire folders without a password. Use share links that expire after 24 hours.