Unauthenticated activities check path "entity_reference_autocomplete/..."

This looks like a duplicate of ✨ Entity reference autocomplete cause the user data leak Active , which was originally and rightly reported on https://security.drupal.org rather than in public but after discussion and with consideration of the current username enumeration policy, 🌱 [policy] Treat username enumerations as security bugs that require Security Advisories Active , was made public.

Can you confirm this is a duplicate?

Looking at this and the related issue, I am inclined to agree with @cilefen,