Restrict Access to TOTP Authenticator Key

I really don’t get this - why on earth would key be visible to all users. For a company this makes no sense and completely invalidates the key. It’s for this reason alone that we can’t use bitwarden but I’m also just a bit concerned as to who on earth thought it was a good idea. Visibility alone isn’t enough - it shouldn’t be POSSIBLE for end users to get this data. If anyone, only admins.