The core of the problem is not that my shared items are public, but that Google unilaterally added my public RSS feed to the subscription lists of any of my GTalk contacts who also use Reader. My “friends” didn’t ask to subscribe to my feed, and I didn’t invite them either.