View biblio nodes doesn't require 'access biblio content' permission?

Just downloaded and installed new Biblio 6.2 dev, enabled, gave 'access biblio content' to only certain roles, created a biblio and it's visible to anonymous users!

Have I misunderstood?

The changelog for 1.5 says <li>Added a <b><em>new permission</em></b> called "access biblio content" which will allow you to restrict access to any of the biblio pages (biblio, biblio/authors, biblio/keywords etc.) <b>A user <u>MUST</u> have this permission to see anything from the biblio module!</b></li>

I know it says pages - but it also says 'anything from the biblio module' - which surely includes biblio nodes?

function biblio_access says

    case 'view':
      if ((variable_get('biblio_view_only_own', 0)) && $user->uid != $node->uid) return FALSE;
      break;

Shouldn't that be

    case 'view':
      if ((variable_get('biblio_view_only_own', 0)) && $user->uid != $node->uid) return FALSE;
      return user_access('access biblio content');
      break;