Having to supply a token to auth that you should have access to a URL is a pretty common thing in streaming/file hosting, especially for CDNs that sites will use to offload file hosting. My guess is it's probably a Patreon change because a lot of creators will expect that kind of feature and get mad if people can easily pirate their content.