Order Status

I have disabled user accounts on my site, so that all purchases are made by guests. I notice that the order status is available via a url:

http://mysite.com/shop/order-status/ac2e7e278df4/

Is there anyway to protect this? Anyway to disable this? While I like this feature, it appears to be available to the general public, and therefore search engines. Is there any restrictions on how and when this information is displayed?