Expecting a statistic model to follow security rules with ironclad certainty was a pretty naive idea from the start
Unfortunately no one markets it as a statistical model, and the workflow pushes you into a pattern that is insecure by design. This isn’t to say they shouldn’t allow that, but it’s an attractive nuisance.