We've discovered that add-appxpackage run by a non-admin user will successfully install the app to the current user profile (as documented) and other profiles on the same machine. This seems to be a bug and security concern. The docs for this PowerShell command do not indicate this command is even capable of this. Anyone aware of this being a known bug?