Edge is allowed to run in locked-down kiosk config

I'm deploying an assigned access XML (https://docs.microsoft.com/en-us/windows/configuration/kiosk-xml) in order to create a kiosk that's used by non-company individuals to run specific programs only.

My understanding of how this is supposed to work is allowed applications that are defined in my XML are allowed to run, but other applications are not. However, despite not including Chromium Edge in my configuration XML, the Edge executable is being allowed to run. I've confirmed this through the "EXE and DLL" Applocker event viewer log file. This is an issue because one of the applications on the kiosk has a UI option that opens a site using the default browser, which is Edge.

One workaround I've found is to downgrade Chromium Edge to Legacy Edge, which is correctly blocked from running, as it has not been explicitly allowed. I could also implement Edge policies to limit the UI so that navigation, address bar etc are not available, but that doesn't seem like a good solution.

I am wondering why Edge is being allowed to run in my locked-down kiosk configuration. Is there a reason why Edge runs despite not being explicitly allowed? Is there a way to change this behavior?