Services property referenced entity access check
When iterating over properties of an entity to be served in RadarServicesEntityResourceController::getData() access is checked when going into an EntityStructureWrapper. However this is within the entity module code. Despite loading the value at some point deep in the code it tries to load the value again by ID and it is hard coded to do an entity_load. However IDs have already been by UUIDs so this fails to load the entity. The code then falls back to generic access check for that entity type.
This 'works' as we don't have access control, however not for files.