Protected medias are downloadable by anonymous users

[lucacolombo4]

Q	A
Bug?	yes
New Feature?	no
Bundle Version	2.5.0
Sulu Version	2.4.5
PHP Version	8.0.x

Hi,
we've tried to enable the option sulu_form.media.protected as described in the bundle's documentation (https://github.com/sulu/SuluFormBundle/blob/2.5/Resources/doc/dynamic.md#media-protection), but seems like that anonymous users are still able to download attachments uploaded into the sulu_form system collection.

We've tried to debug the ProtectedMediaSubscriber event subscriber and it appears to correctly redirect the user to the admin media download route, but it doesn't seem to verify if the user is logged in before allowing the download.