It is highly recommended password protection be used so this is not viewable by anyone.
In the example provided the example cPanel account user will be cpuser and the user home is /home/cpuser
As the user run
mkdir -p /home/cpuser/public_html/webalizer
ln -s /home/cpuser/tmp/webalizer ./stats
Then log into cPanel as the user and use "Directory Privacy" to password protect /home/cpuser/public_html/webalizer
Now if the user's main domain is cpuser.com you can visit http://cpuser.com/webalizer and when prompted for a user and password login and then go to the stats folder.
Note: I may be possible if disabled the following will need to be added to /home/cpuser/public_html/.htaccess