This should be fixed very shortly. Thanks for taking the time to point it out and help others with your blog post.
I've been bitten by this problem too... but the "fix" sounds like allowing anybody to push code, so in the end, the repository remained private!
In more recent versions of GitLab, you can change the project level visibility in a separate drop-down, this will allow visibility to all, but continue to restrict push access.