ContainerPart handler overrides item display route and directs it to ItemController in Containers. That controller (as opposed to ItemController in Contents) does not check view permissions at all.

Besides the permission check the rest of the code is identical (the BuildDisplay call) - it looks like some old leftover that messes things up.