staffOrderNotificationSubscriptionCreate Is Not Blocked Entirely From Staff Member With Settings Permission

I found that the GraphQL call `staffOrderNotificationSubscriptionCreate` is not blocked from the staff member with Settings permission

{"query": "mutation{staffOrderNotificationSubscriptionCreate(notificationRecipientIdentifier:\"[email protected]\",notificationRecipientType:EMAIL){staffOrderNotificationSubscription{id}}} "}