how can I restrict the file-access to users which are not logged-in?
I could not find anything in the forum yet and in the plugin setting I only found settings for users and user roles (but not, if a website visitor has no user/user role).
URE will ot help. URE is responsible for the WordPress access settings. Direct file access is not managed by WordPress. It’s managed via HTTP server software: Apache or Nginx.