The ServiceEntryPoint relies on the presence of the "level" field in "readConcern" to check if shard versioning check is required on secondaries.
In case an external client didn't set the readConcern because they meant to use the default one (which is "local" since PM-1970) but the command doesn't permit implicit readConcern to be applied the command won't perform orphan filtering on secondary nodes.