Plenty of sites use URLs like http://example.com/sd8n9g9g rather than require logins for private / semi-private material. What's wrong with that?
It's a pretty bad practice. I guess for semi-private material it's okay, but otherwise that's liable to leak. The biggest hole in it is referrers leaking to other sites, but I can think of other methods (eg probing the CSS history exposure bug).