My reaction to your reaction:
"public" is not the same as "remote". You seem to be getting confused about this. PUBLIC methods should not be web-accessible. Only REMOTE ones should be. Reading: http://help.adobe.com/en_US/ColdFusion/10.0/CFMLRef/WSc3ff6d0ea7785946 1172e0811cbec22c24-7f5c.html
--
Adam