Good point John,
But there’s a filter you can use to make it protected:
function protected_da_display_attachments($attachments) {
if (post_password_required())
$attachments = '';
return $attachments;
}
add_filter('da_display_attachments', 'protected_da_display_attachments');