In these scenarios, use the noindex tag if you merely want the website page not to seem in Google, but You should not brain if any user that has a website link can get to the website page. For real protection, use correct authorization solutions, like necessitating a person password, https://rsac.org