Method setEntityPermission doesn't work properly

From the documentation:

You can also restrict which items users can see in the index and detail pages thanks to the setEntityPermission() method.

I want to restrict access to the index and detail pages to employees who share the same profile property as the current user:

public function configureCrud(Crud $crud): Crud
{
    return $crud
        ->setEntityPermission(
            new Expression("subject.profile === user.profile")
        )
    ;
}

And it doesn't work. Expression seems to work fine for edit, delete and detail actions instead.

Start with the security documentation section on setEntityPermission() and trace the configureCrud() entry point using the provided Expression example. Compare permission handling for index and detail pages with edit, delete, and detail actions. Done means an expression such as subject.profile === user.profile correctly restricts the index and detail pages, with coverage for the reported case.