Anonymous user is allowed to configure SXS settings

1) I browse to my D8 website as a ANONYMOUS USER 2) Acting as the anonymous user, I create a new forum topic 3) As shown in the screenshot ...

from Google Alert - anonymous http://ift.tt/1SrzaeD
via IFTTT