Aqara Alarm requires passcode but not to dis-arm

I read a couple threads that the alarm cards have been updated to include a code, which is what I prefer but oddly doesn’t need it to disarm.

I added a code to the alarm entity, which allowed the arm and disarm without entering a code. Then I removed the code from the entity, restarted home assistant armed it in the aqara app then went into Home Assistant selected the disarm button and it worked,