No, I found out what happened.
The FTP server I use for the direct link downloads for patrons ended up getting my folder publicly available, anyone can access it.
Someone just bookmarked it and kept checking it until the update was uploaded there.
Not cool to leak it here before I even made the patreon post tho.
A suggestion...
For the FTP server, if it has the capability to easily do so as it'll create more administration work.
Create some sub-directories for your Patreon tier levels
When you have a new release place it in Tier 1 for those with immediate access
When it is available to Tier 2, move it into the sub dir for Tier 2 and create a Symbolic Link back in the Tier 1 folder
When it is available to Tier 3, move it into the sub dir for Tier 3 and update the Symbolic link in Tier 1 and create one for Tier 2
When it's available to Tier x, etc
When it's available to Public remove & re-create all prior Symbolic links
For the Usernames in question
I'd suggest each tier have a unique user/password w/ a time limited password