I don't think there's a way to prevent this; it appears that LabKey is simply not respecting the Protected setting when exporting the attachment files themselves. (By the way, the PHI setting is only respected by custom schemas right now.) I'll open an issue to investigate improving this.

Thanks,
Adam