Yes, that's true. It's not particularly secure. I don't think many people are going to try and gain brute force to a random photo album, especially considering 80% are blank with people just trying out the site..