Hi. It seems that there is an issue in accessing to plugins for anonymous users when anonymous access to whole instance is enabled but a space is private. So when I share a url of a plugin like draw.io for users that doesn't login to confluence, it doesn't redirect to login page and display 403 error.
I hope that I explain problem clearly
Thanks