Interesting the API returns the text for people that shouldn't have access. That's a bug with Lemmy I'd say. A ticket should probably be filed there
Put up a PR to fix this with voyager tho, quick change. Keeps the button around for mods & the author, but hides it for everyone else when the comment is removed