A public client is a client that has a public type.
It means that you are not the administrator of the computer whereas with a confidential (private) client you are.
A bad agent can scan your application in order to find authentication/authorization material.
With an authorization code grand, PKCE is recommended for public client