We just noticed that the Descriptor link in Resources section of the add-on listing page was previously only visible to app owner. You can verify that by checking this archive page for Draw.io from 2020: https://web.archive.org/web/20200809205941/https://marketplace.atlassian.com/apps/1210933/draw-io-diagrams-for-confluence?hosting=cloud&tab=overview
Right now, you can click on any app and Descriptor link is visible to public. While this is not exactly secret, I am wondering if it was intentional or just a bug.
