At the moment, it seems that all temp file go to the same scope, which means that it has to be visible globally.
Each user should have their own temp scope which is visible only to them. Other people should not be able to read an individual user's temp files.
RKC asked me to check this out. If I create a temp file as a result of running a job, any other user can see the folder and the files within it.