New more Secure Auto Routing

Supplementary information on the risk here.
The controller filters being bypassed is the most obvious risk and the most significant.

The problem is that developers are not strictly aware of HTTP methods of a request, which can lead to defects if an attacker accesses the site with an HTTP method that the developer does not anticipate.

If the HTTP method does not change the processing, it does not seem to cause any particular problem, so I do not consider this to be a big risk. However, this is not to say that there is not a major risk of which I am unaware.
At the very least, the auto routing legacy will accept requests that do not need to be accepted.

ci-phpunit-test | CodeIgniter Testing Guide | CodeIgniter 3 to 4 Upgrade Helper