Is your feature request related to a problem?

Checking 'read' capability is technically correct, however practically this doesn't make particular sense, since this is a permission all users have.
I'd like to be able to remove this capability from the rule via config, as most likely this current_user_can check is not safe enough.

Describe the solution you'd like

Config to remove default WP capabilities or remove it by default

Additional context (optional)

• I intend to create a pull request to implement this feature.