WordPress plugin custom server update protect download url

I followed this tutorial to provide update to my plugins on my server:

https://rudrastyh.com/wordpress/self-hosted-plugin-update.html

This uses filter hooks plugins_api and site_transient_update_plugins to retrieve plugin info from custom server (my server in this case) :

 "name" => "My Update Checker", "slug" => "my-update-checker", "author" => "", "author_profile" => "", "version" => "1.0.91", "download_url" => "https://my-domain/some-folder/my-plugin.zip", "requires" => "4.5", "tested" => "6.62", "requires_php" => "5.3", "last_updated" => "2024-09-13 00:00:00", "sections" => array( "description" => "The new version of the This plugin", ) 

Is there a way to make dynamic download_url, so the download_url doesnt really show actual plugin location on server ? ( https://my-domain/some-folder/my-plugin.zip )

I know users who already own the plugin can share the plugin anywhere (without permission), but thats not the point here.

I just dont want plugin link to be publicly visible ( https://my-domain/some-folder/my-plugin.zip )

I can put plugins zip anywhere on my server, but is there a way generate one time usable random link like:

https://my-domain/th45Z5ewrt346f5sdd23g5hr324wtz4twetew/my-plugin.zip