You can disallow anonymous user to access the uploaded files in a form level. Also, only the logged-in users with form access will be able to view/download the uploaded files