White listing /private/ folder has allowed Apps to run from Desktop folder!

New Contributor

Hi there
We have noted something weird in the past week whereby students who previously could not run games from their users folder now can.

We didn't believe anything in our lockdown policy had changed so we started removing whitelisted folders until we saw a change.
It appears that the whitelisting of the /private/ folder is allowing the apps to run from the desktop folder.
(or any other user folder).

We remove the /private/ folder from the whitelist and the apps are blocked (but Chrome amongst other things just crashes because it can't run its update) - add the /private/ folder back and the apps run again.

Something has changed - as this did not happen a week ago.

Anyone see this at all?