Them being allowed to definitely wasn't an intentional change, I recently refactored a lot of permission policy related things and seems I either forgot that one or thought it was fine to leave alone
I'm not sure if I care enough to fix that, the whole approval system is only temporary until we have more staff anyways