So how long do you want them not leaked for? Because I think each upload is a different url and idk how they generate the url. So what I do is upload photos there and the maybe use them in posts a day or 2 later. They are technically public, but unless someone is actively scraping I think this works for me at least.