Hi protosd,
first of all, thanks for your guide "two users with a shared folder": I largely based my setup on that.
In my little experience, "Browsable" just hides the available shares, but it still allows the first unauthenticated connection. The two function are similar, but I think that denying the connection is better, both for usability and for security.