L3 - Default Context:
Similar to the /flow-node/flowNodeNames endpoint, the /decision-variables/inputs/names and /decision-variables/outputs/names endpoints needs to allow public access in order to allow their usage in the context of shared reports.
In case of the inputs their usage is required to resolve the stored (in case of filters) input/outputId to the name from the corresponding definition.
The risk of exposing confidential data is considered low, as exploiting requires knowledge of the definitionKey, and if so the impact acceptable, only inputs and outputs of the definition are accessible no instance data.