I have a News Articles page which is restricted access (i.e. not open to All Users). However, anyone typing the path to the article can view any article, even if they are not logged in.
The "Launch Links" feature needs to be better described in the documentation. I have turned this off and I am running 00.05.14 but I still have the security breach (i.e. articles can still be read).