This week's book giveaways are in the Refactoring and Agile forums. We're giving away four copies each of Re-engineering Legacy Software and Docker in Action and have the authors on-line! See this thread and this one for details.
If you look at the rules for accessing a protected entity from outside the same package, you'll see that they just wouldn't apply to a top level class. So the access choices for a top level class are public and default (package).