I would say it's completely different. Passwords are specifically intended to restrict access. File names or paths are specifically intended to facilitate access.

That's an arbitrary distinction. Your credit card number is not intended to restrict access, it's specifically intended to facilitate access, but it's not public information. If someone uses brute force to guess your credit card number, I would call this practice illegal too.