Most likely a bug: DORA metrics violate permission restrictions

Problem

DORA has four indicators, they should only be available under ULTIMATE authority.

But now, even without the ULTIMATE license, there is still an indicator deployment frequency that is not hidden:

Why

In the product logic two years ago, deployment frequency did not belong to the DORA metric. So it is directly hard-coded in the code to return:

This is a product design from two years ago, I found it here from this MR