Anyone can click the link and download your wallet.dat .

Developers occasionally back up their entire website directories to public GitHub or GitLab repositories. If they accidentally include their local Bitcoin data folders, the wallet.dat file becomes publicly searchable. Common Reasons for Exposure

A downloaded “found wallet” often turns out to be a sophisticated scam designed to infect your machine and steal your own cryptocurrency wallets, browser credentials, and session cookies.