Predictions access control is ruled by moodle/analytics:listinsights capability and they are accessed through report/insights/insights.php and report/insights/prediction.php.

insights.php lists prediction model insights in a context (e.g. ?modelid=X&contextid=Y) and prediction.php shows a prediction. It does make sense to let listinsights capability to control the access to the list of insights in a context, but we may want to show predictions to users without listinsight capabilities in the context predictions are part of.

An example of this is any model where the analysable is a course and samples are course students; teachers have listinsights capability at course level, but students don't and they shouldn't because otherwise they would have access to all predictions at course level, but a model may want to show student predictions to students as well, not only to teachers.