Inconsistent behaviour with delegate of an author of a CR

Reproduction steps:

• Create users Foo and Bar
• Enable delegate mechanism and creates a delegate for Bar
• Create a page Test with approvers Foo and Bar
• Forbid author of a CR to review their own CR in administration
• Create a new CR with Bar from Test
• Login with the delegate user of Bar and go to the CR

Expected result:

• the user should not be able to review this CR, as it would be done on behalf of Bar who is not authorized to review it

Obtained result:

• the delegate can review it, but apparently the review is not taken into account (even a request for changes doesn't prevent merging it if Foo approves)