Add a permission for archived artifacts just like the one for accessing the workspace.
By now, if anonymous has read permission on a job, can get the artifacts.
Sometimes, anyway, artifacts shall be private even if a lava lamp would display the build result.