Child able to change Always Allowed without screen time passcode

We use screen time on my daughter’s iPhone 16e. This normally works great, but we recently found she is able to go into screen time on her own phone and change the settings for Always Allowed without requiring a screen time passcode. How can I restrict her from adding apps on the Always Allowed?