This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local user may be able to read arbitrary files as root.Referenceshttps://support.apple.com/en-us/HT212804https://support.apple.com/en-us/HT212805