From a technical perspective I'm not sure... however, from a pragmatic perspective it is easier to expand the scope in the future if the need arises than it is to give too much scope now only to realise it should have been restricted (as in the latter case 3rd-party projects may already have become dependent on the overly-generous access). So for this reason I will remove the public access for now.