Any way to restrict access to the File cabinet? Seems as if all our files are freely accessible via the URL

In General Preferences, do you have "Web Site Hosting Files Always Available" checked? We previously had this box checked, though we don't use the web hosting feature, and it caused a similar problem for us.