This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system.
https://support.apple.com/kb/HT211100
https://support.apple.com/kb/HT211100
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9771