Issue with Get Status API

Hello we are running some authentication testing and are running into some behaviors that may or may not be a bug. for this endpoint

/seistore-svc/api/v4/status

We have 3 tests running

1. Sends an invalid token
2. Sends a valid token but signed with a wrong secret
3. Sends the HTTP request without an authorization header.

1,2 return a 401 but 3 returns 200.

Is this a bug or intended behavior? Thank you!