Publishing to an HTML 5 package could have a variety of uses:
You could embed it within other course material, for instance in a Lectora course where only part of the course would be a 360 experience. Its likely the content would not be consumed in a VR device, but would be viewed in a Web browser
You could also put it directly in an iFrame on your website, again, generally not viewed through a headset
For your second point, we have on our roadmap a setting on your organization to not allow public scenarios to be viewed.