The frontpage of our Intranet is a hub site. On that page we use the news web part to display news from about 15 different communication sites.
Today I noticed that if we use the built-in function to reorder the news items, the permissions for those news items are no longer respected. That is, a person who do not have permission to read a particular article, will still see that article in the news web part.
If I remove the custom ordering the security trimming works, and the articles are no longer shown for the people who do not have read access to them.