Whoa, I just came across this problem as well. A client messaged that their private pricing PDF is appearing in search results. None of our public webflow pages are linking to it, only a password-protected page used by exclusive clients.
The private page does not appear in results, however that private PDF is appearing through the https://assets-global.website-files.com domain where we cannot robot-exclude it.
We can’t even ask Google to remove the search result through GSC, since it’s not on our domain.
We didn’t realize that webflow hosted assets ( even private & un-linked ones ) were being exposed to Google indexing directly through a different domain. I can’t imagine why since it doesn’t even boost SEO for Webflow clients?
Has anyone found a way to prevent this, or to remove these files?
Webflow support request?