To reproduce:

got to https://ci.blueocean.io/blue in incognito mode, will make you log in to github.

Previously you could get read only access

https://ci.blueocean.io/configureSecurity/ has the correct settings, I think.

Classic does work correctly, it is the /blue URI that does not.