How to hide the original image (from public folder)

[petrzavicak]

By default, files are uploaded to the "storage/app/public/media" location. Each photo has its own directory (1,2, etc.) and the image conversion files are located in the conversions subdirectory. However...

I need to make sure that the main uploaded file that the media library works with is not available to website users. In other words, I want to make sure that all the conversions I generate include a watermark, but I don't want to include a watermark in the original file. And of course, I don't want a user who can detect the name of the main file to be able to download the file (without a watermark).

It seems to me to be a very important feature, so I'm surprised that I don't see anyone on the Internet solving this problem.

How to achieve? Or did I omit some part of the documentation and is it possible to set the media library to store the main file in the specified location / directory (outside the public folder)?