Urls and files use UIDs. These are long and complex numbers that are generated automatically and therefore can't be guessed by anyone. The probability to ‘crack the code’ is like 1/(2^128), so we wouldn’t place our bets on that. A transfer link is an example of an UID.