Attempt to use the private path so the cache files are protected and hopefully outside of the webroot. Fallback to the public file system. But even there the filecache directory should be protected with an htaccess file (and provide instructions for doing it with nginx).
Attempt to use the private path so the cache files are protected and hopefully outside of the webroot. Fallback to the public file system. But even there the filecache directory should be protected with an htaccess file (and provide instructions for doing it with nginx).