The wiki can be seen by anonymous users.

It couldn't work if a user wasn't authenticated because this annotation will search for a user entity (from getToken()->getUser()).

Moreover the $user parameter was unused.