The dry-run execution button is publicly accessible (for anonymous users) whereas anonymous users are not granted the Run right.

On a public Jenkins instance, a dry-run is executed by indexing robots!