Whoa this is awful. Somehow I missed this post in August. This needs a lot more views! Thank you for posting!
I thought I’d try “Read Only,” but that does not, in fact, make it read only.
If I had to guess (because I have to guess), it’s due to the app-open calling the app, not the menu ID.
Menu security is kind of OK for this. But I feel blindsided by it all.