When debugging with kint in a twig tpl the output is seen also by site visitors although they are not logged in.
Permissions "Access kint information" are set just for admin.
Is this a bug?
Drupal Answers is a question and answer site for Drupal developers and administrators. It only takes a minute to sign up.Sign up to join this community
Most likely the issue is probably related to caching, you can argue that it's a bug in devel/kint module and that is should have an implementation to handle this.
I would argue that the use of kint in a template file is made for running the site in development mode and if you disable caches (which is a really idea on an actual production site) it should work just fine.