Firebase storage - how to deny permission to access a file in storage to an unauthorised web user?

Question

Firebase storage docs suggest user access to files can be managed by setting Firebase storage rules. In practice, however, despite setting the storage rules to