Problem:

The problem here is that the user's WYSIWYG field is not displaying external URLs correctly whenever the WYSIWYG field is added inside a conditional shortcode.

Solution:

This only occurs when you've formatted the conditional statement to use the shortcode of the custom field like below.

[wpv-conditional if="( '[types field='other-activities'][/types]' ne '' )"]Some Text[/wpv-conditional]

However the issue can be resolved by formatting the conditional like below

[wpv-conditional if="( $(other-activities) ne '' )"]Some Text[/wpv-conditional]

Notice the use of a different format to call the Types custom field

Problem:

The main issue here is that the user wanted a way to protect their file directory from access using a direct link to the file.

Solution:
My best advice to secure your uploads folder is to use the plugin below.
https://wordpress.org/plugins/prevent-direct-access/

This plugin will block direct access to the files from guest users and only the authors and admin of the files can access it.