Secure File Download from a path outside of website root

[sitestreet]

A solution has been posted in this thread:

Securing files in a folder so they can only be accessed by logging in

I ended up using this in the .htaccess file: Order allow,deny Deny from all Seems to work perfectly. Can anyone confirm or reject this as a good solution?