I would like to prevent anyone from downloading feature layers that I have share publicly or, at the very least, the ability to choose which attribute fields to block from being downloaded. I understood from a blog post that unchecking the box next to Allow others to export to different formats would prevent others from downloading my data but I was able to use the REST endpoint to access my Feature Layer (hosted, view) and export the information from an ArcGIS Pro project that I was not signed into.
I would like to apply this concept to the following project/workflow:
I created a model to re-write a Feature Layer every day at noon by deleting all of the features in the Feature Layer and appending features that have a Status of Active or Pending (some data expires over time and I do not want to show these locations). My point Feature Layer (hosted, view) is embedded in a public dashboard that displays an address in the pop-up. The point of the app is to allow the public to view where there are valid licenses and determine if they need to report an infraction. As there are nearly 1000 data points, I don't mind if members of the public look through the individual points but I don't necessarily want them to have access to the whole dataset or be able to download the data which changes over time. I also don't want them to know which points are assigned a status of Active or Pending, which is not disclosed in the pop-up but is stored in the underlying attribute table.