In case anyone's still interested, the "loophole" is still in place. I passed the URL to the X SM to a friend and it pulled right up. Users guides and navigation systems are also in there.

They still aren't disabling the save function in the PDFs, and they aren't bothering to authenticate requests for them either. They're using javascript to pop the PDFs open in a new window, but it's not exactly challenging to get the direct URL. Only thing that sucks is the various sections are separate files. The index file for the service mans is always fwd.pdf.