Are the images published in the Staff category publicly visible?

I think so. Otherwise, there would be no need for the secure-uploads feature:
https://meta.discourse.org/t/secure-uploads/meta/140017