No. The timthumb.php script can be accessed directly by unauthenticated users.