Based on the following, I suspect PUBLIC_READ may not work reliably on transient blobstores such as the filesystem provider, though:
Looks like I jumped the gun here a bit ;-) Do you see the same behaviour with 1.9.2, i.e before the change you referred to with the "Everyone lookup" was introduced?
Regards ap