No, URLs are not secret or secure, at best they are hidden. A proper secret is something that you can only give consciously, URLs are often shared without inte

No, URLs are not secret or secure, at best they are hidden. A proper secret is something that you can only give consciously, URLs are often shared without intent (via screensharing, screenshots, (often unencrypted) emails, server/proxy logs, etc). Many services like the ones you quote do allow sharing via URLs for ease of use but should also have a option to turn off auth-in-url style authentication for things that are sensitive. It's okay for things that have a low value but need to be shared easily, but should not be considered secure.