Issue #2785449 by jonathanshaw, longwave, andypost, catch, timmillwood, larowlan: It's too easy to write entity queries with access checks that must not have them