Media Entity Pages /media/#

Hey there,

I’ve got to say, I’m loving the new Media entities in D8.5 and all the work that has gone into bringing Media to core, this really takes Drupal to the next level of open CMS platforms.

One question/concern I had was, why are there no permissions settings surrounding anonymous viewing of media entities by directly navigating to /media/ pages?

I mean yes, I can add a rewrite rule to send all external traffic to “/media/*” to the site root, but I just feel like there should be a permission that locks down the anonymous viewing of media entities from their directly linked pages.

Drupal version: