Doesnt this allow me to download every file possible only condition is that im logged in? 

see https://github.com/owncloud/core/blob/stable45/lib/files.php#L142

cc @LukasReschke