I have published point dataset as a Feature Service to ArcGIS Enterprise 1071.
This creates a map service and feature service. In Portal, I can change the security of these individually > Map service shared to Everyone and Feature Service shared to a group.

But it still appears that the Feature Service is publicly accessible and editable. Am I doing something wrong here?