My experience with S3 buckets was that it was super painful and annoying to make the images publicly visible. So these people had to go out of their way to make this publicly accessible.
AWS S3 has made it significantly easier to restrict bucket access, but those are all (relatively) new changes.