Hi there, we have a map in use within an Experience Builder (AGO) List widget. The List is populated via a public view layer hosted in our agency's Enterprise Portal 10.8.1. We have the setting there disabled to allow export of the data, yet the List widget still allows for the export to occur.
Public View layer setting (Portal 10.8.1):

List widget (AGO):

It then successfully downloads the records as csv.
Should this happen? I was checking in the List widget settings but couldn't seem to find an option to disable it, though I'm sure it's somewhere.
What is the most secure way to control this setting? It is important for us to disable public export or download of this dataset or we'd be violating a terms of use agreement.