You're right. There's no real privacy to protect with the urls... I'll change it even for private leagues.

For the users however the "safe" url is useful otherwise people could guess other people's url and change their predictions!