Your comments

Thanks. Removing BuildAccessInstaller permissions just removes the ability in the GUI. but the URL generated by the access build installer Previously is still publicly accessible by everyone via the URL.

Ultimately, the installers are there in the bin folder and therefore accessible by the public. I raised this with support who said to raise a feature request.