Hi,
The Shared Files feature stores files on disk using a .config extension which is protected by ASP.NET so even if someone knew the name and location of the file it will not be served if requested by url.
http://www.mojoportal.com/sharedfilesmodule.aspx
HTH,
Joe D.