For exported zip files, we use names like "user_{user_id}_memos_export". This naming convention makes it easy for other users to guess filenames of exported files and download exported data they should not have any access to.

Proposal for a fix: For each export job, create a subdirectory named after the export job ID, leading to a URL like this: /temporary_files/e54a4181-6f17-4520-b505-364c687bd606/user_1_memos_export. This URL is almost impossible to guess while still giving downloaded files a nice and descriptive name.