I also commented this, but I have to say their statement is false. The links to all the delivered projects are publicly accessible. I went over my orders and I could open every single one from another device, not logged in.

this is because copied the link with the token, token is generated for your logged in user. strip the token and it wouldn't work