Yes, definitely need to allow exports by anonymous users and exports should include all publicly visible (not just publicly editable) fields.