security rules

Hello,

To embed in my website, I use this link

To prompt for login details :
https://creator.zoho.com/showViewLinkAlone.do?viewlinkId=<VIEW_ID>&link=true&sharedBy=<ACCOUNT_NAME>;

To access the view without login (privatelink) :
https://creator.zoho.com/showViewLinkAlone.do?viewlinkId=<VIEW_ID>&link=true&sharedBy=<ACCOUNT_NAME>&privatelink=<PRIVATE_LINK>;

But why I can access the application with this link?
https://creator.zoho.com/showViewLinkAlone.do?viewlinkId=<VIEW_ID>&link=false&sharedBy=<ACCOUNT_NAME>;

Just the property link=true to link=false is changed

My application is private, only by https, with XXS secure in the application settings

Thank you