Using <button> versus <nolink>

Does the module work with <button> as the link? It works ok with <nolink>. Using v8.x-2.4 in core 11.2.4.

I have website navigation with a top-level item that has no page. It only triggers the dropdown. I tried using <button> but noticed anonymous users still see it, even though I set permissions for them not to.

When I switched <button> to <nolink> it was indeed hidden. But it seems I can't use <button>, which I believe is better for accessibility purposes.