I received an access request for an unshared folder. I don't know how this folder link could have gone public as I have never--under any circumstances--shared this folder. It is still unshared:
My theory: Someone has created a bot that tries different google drive URLs and sends an access request if a valid URL is found. Is this reasonable/plausible? I can't imagine why someone would want to do this.