This authorization rule is kind of written by mistake, because it is not necessary. The application behaves in the exact same way without it, making the line completely redundant. If I had noticed it without anyone pointing it out, I would probably have removed it and not given it much thought, but you're making an excellent point regarding readability.

In order to keep the default-inaccessibility property and improve readability at the same time, I propose that we make each action completely inaccessible by default for everyone, including admins. This would force us to always create authorization rules for every action and each would have to be explicitly defined, without having redundancy. What do you think about that?