It is possible for guests to see the details of participants' choices and there is no capability to control this. There is a setting to control whether results should be shown, but there is no way to discriminate between guests and authenticated users.

This could potentially be considered a minor security issue as it is revealing student details to unauthorised users. There should be a capability that prevents guests from viewing choices made.

Replication steps:

1. Log in as admin/teacher
2. Log into a course that is open to guests or use the Front page
3. Create a Choice activity with a few choices
4. Set Publish results to Always show results to students
5. Save the activity
6. Log in as a student
7. Make a choice
8. Log out
9. Access the Choice activity

Expected result
Results should not be available to guests or shown in an anonymised form.

Actual result
The image and name of students who have made a choice is visible.