Hello, I am adding some comments as suggestions:

Our system has authentication and if somebody makes a report we only want this one person to be able to access it (out of the public/guests). This could be optional.

Additionally you could add an "email verification" as login method for public. Something like one-time password sent via email when public user is "logging in" ... and then after such login, the user could see all his reported issues (issues reported using his email address).

I am concerned about privacy and security when the reports are just behind obfuscated URLs.