You'll notice
Bash input redirections are now permission-checked like other reads, and can produce deny or ask outcomes.
Bash command permission checks now evaluate < input redirections the same way they evaluate output redirections and other read targets. Reads via shell input redirection can now produce deny or ask outcomes, including manual-approval prompts when the redirected file depends on glob expansion or a directory change within the same command, not just writes.