The unmasquerade link always appears because the access checking function is out of date.
class UnmasqueradeAccessCheck implements Drupal\Core\Routing\Access\AccessInterface
But AccessInterface is deprecated
so
public function access() {}
Is never being called

Comments

matslats created an issue. See original summary.

andypost’s picture

andypost’s picture