If that file is uploaded to a web server or a cloud drive with "public" permissions, Google and other search engines will crawl and index it, making it searchable to the entire world.
If directory listing must remain enabled for legitimate reasons, use the IndexIgnore directive to prevent specific files or file patterns from appearing in auto-generated directory listings. For example: