Hi Bob Barr,
Setting the directory its self to 444 will eliminate the possibility of anyone writing to that directory or editing files.
A question for you though. Do the users who will be accessing the files require only FTP access? Otherwise you could allow indexing on the directory and password protect it forcing users to login to view the files while allowing them to use their browser.
Just a thought.