[endgame]

These days, you have to remove the public access block AND explicitly write a bucket policy (or set up deprecated ACLs) to allow public access.