Development preview features must not be enabled by default in a production environment. The Bootable volumes page in the web console is a "Dev preview" and it is enabled by default for CNV v4.13.0. It should be removed or disabled by default.
The jira issue is closed, can we close the bug?