The assigned templates on a permission scheme are not validated when performing an export request

With the global settings configured as displayed on screenshot-1, and a permission scheme configured as displayed on screenshot-2, it is possible to export, successfully, as a logged user, a Bug type issue, from the project associated with the Permission Scheme, using the following servlet link http://146.185.129.13/plugins/servlet/jiraxporter?issueKey=AIR-24&outputType=pdf&template=SampleIterations , even though the only assigned template for that issue type on the permission scheme is ScrumCards and the template on the servlet request is SampleIterations
Also, it doesn't seem to validate if the user Roles and Groups are allowed to perform a request