Side note: Handling static files in a production environment is a common deployment-related issue here. There are many threads discussing it from different aspects.
For some additional information and another perspective, you may wish to read the threads at Restrict image access, and Django deployment. (They are talking about different issues, but a lot of the general information applies.)