WooCommerce Memberships

I am trying to protect a download by assigning it to a WooCommerce Membership plan.
The files download page itself is protected correctly and it tells me that the proper plan has to be purchased.
When someone shares the direct download link though (by copying it from the page source of a logged-in user), that download page is bypassed and the download is started even when not logged in at all.
And since the download is not direct I can’t even do a not-so-great .htaccess referer checking in the folder.
Any ideas?

Thanks
Mark

…well, I was able to add a referer check with the following on the top of the main .htaccess:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{QUERY_STRING} wpdmdl= [NC]
RewriteCond %{HTTP_REFERER} !^https://(www\.)?mysite\.com/ [NC]
RewriteRule .* – [F,L]
</ifModule>

It would be nice though to have the additional possibility of logged-in users only or even better with WooCommerce Membership integration.
Or maybe expiring links that only work for an hour or so. Or downloads just from the file’s page and not directly.