Unassigned user getting access to FCRM

[ajiragroup]

We try to separate which employees get access to which modules by using Roles and permission.
Currently, we have not given access to any employee to FCRM, only the system manager.

We also have disabled app page after login.
But, other users see this app switch page from here:

The user has this module permission set.

This user cannot see Frappe CRM module on home page.

But can access domain.com/crm

Update:

We also learnt that app selector does not display CRM if Roles: Sales user/Sales Master Manager are disabled.

But still can access domain.com/crm