Hello,
it may be checked in a navigation started by some hidden button etc. I would consider some sort of a source code scan. In case it is not checked, it would be cool if you could report the SU24 mis-configuration to SAP so everyone gets this corrected.
cheers Otto