By default thunar can access your network. to secure/prevent this network access for a public kiosk, use the command below.
$ sudo chmod 000 /usr/share/gvfs/mounts/network.mountAnd if you want to put it back:
$ sudo chmod 644 /usr/share/gvfs/mounts/network.mountYou need to restart your computer in order to apply the change.