Change the Public Access permission requirement from WRITE to READ on the DataPackageManagerResource.downloadDataPackageArchive service method. Since this service method no longer creates an system artifact, it only makes sense that the Public Access user only requires READ access.