As of the 2023-07 Admin API release, you can now apply a PUBLIC_READ access setting to your metafield definitions. If your metafield definition is PUBLIC_READ, this means:
This is a companion discussion topic for the original entry at https://shopify.dev/changelog/public_read-access-setting-for-app-owned-metafields