Are markdown files accessible from a live site?

Are any of the files in "user/pages" accessible once a site goes live? I want to password protect some pages and want to include a "password" field in the markdown for those pages. I just want to make sure that the file itself is not visible.

Also if anyone has a better idea for password protecting individual web pages please chime in!

Using the Login plugin you can create a private area or protect some pages to require login: https://github.com/getgrav/grav-plugin-login/#usage

Or you can use the Private plugin https://github.com/Diyzzuf/grav-plugin-private

Or, use .htaccess/.htpasswd protection on a webserver level (if using Apache)

Perfect answer, thank you!