Non space user can update tasks via comment form

Background:

1. Fresh install of OA on Pantheon
2. Create a public space
3. Create a task section
4. Create a task
5. Create a user without any role(s)
6. Login as the regular user
7. Navigate to the created task

Now you can update the task as a non member space user.
See screenshot.