Secure /uploads file

the files themselves? not really possible as it would require proxying those files through the strapi application to layer authentication on them.