I just tried it with an lh3 url I got from chrome, opens fine in incognito. Repro easily: from /photo/ page, open image in new tab; copy address to incognito; expected: login challenge, actual: photo.
Edit: I don't work on this stuff, but have seen it challenge me when trying to do this exact thing.