It's because of automated web crawlers and search engines which crawl the download links.
you're never going to get an accurate rep of how many people download your mixes by password protecting them.
Best bet if youre really concerned is to upload to hearthis or soundcloud and then you can see...