One note:
if you don't give permissions to the users for public folders, how r they gonna develop reports?
So denying access will not work.
You have to edit system.xml to hide but still give execute access to public folders and packages.
Even in that case, report studio users will be able to see the packages they are going against.