WordPress plugin custom server update protect download url

Question

I followed this tutorial to provide update to my plugins on my server:

https://rudrastyh.com/wordpress/self-hosted-plugin-update.html

This uses filter hooks plugins_api and site_transient_update_plugins to retrieve plugin info from custom server (my server in this case) :

            "name" => "My Update Checker",
            "slug" => "my-update-checker",
            "author" => "",
            "author_profile" => "",
            "version" => "1.0.91",
            "download_url" => "https://my-domain/some-folder/my-plugin.zip",
            "requires" => "4.5",
            "tested" => "6.62",
            "requires_php" => "5.3",
            "last_updated" => "2024-09-13 00:00:00",
            "sections" => array(
                "description" => "The new version of the This plugin",
            )

Is there a way to make dynamic download_url, so the download_url doesnt really show actual plugin location on server ? ( https://my-domain/some-folder/my-plugin.zip )

I know users who already own the plugin can share the plugin anywhere (without permission), but thats not the point here.

I just dont want plugin link to be publicly visible ( https://my-domain/some-folder/my-plugin.zip )

I can put plugins zip anywhere on my server, but is there a way generate one time usable random link like:

https://my-domain/th45Z5ewrt346f5sdd23g5hr324wtz4twetew/my-plugin.zip