Submitted by WatchPug, also found by csanuragjain, datapunk, and Lambda
There are some protocols (eg Notional) that allows redeem before maturity, when doing so, they will  actually make a market sell, usually means a discounted sale.
Since redeem() is a public function, anyone can call it before maturity, and force the whole protocol to sell its holdings at a discounted price, causing fund loss to the stake holders.
https://github.com/notional-finance/wrapped-fcash/blob/8f76be58dda648ea58eef863432c14c940e13900/contracts/wfCashERC4626.sol#L155-L169
Consider only allow unauthenticated call after maturity.
JTraversa (Illuminate) confirmed
