Are Private Links Really Private?

roy.tucker says:
In the new version, when you use the private link to OSX calander, is that URL (albeit long), available to public? I thought there used to be some kind of RTM authentication to use the link?
Thanks
Thanks

(closed account) says:
I was never aware of any authentication. The uniqueness of the link was the only protection in the past that I was aware of.