Users now have public access to static blocks. This shouldn’t be.
Please see private area for example page: both static block and web page have almost identical URL, so visitors coming back and punching in the location could get redirected to the static block.
Not so much a feature request as it is a request to fix an issue, but since this is new, I decided to post both here and as feature request