"Login attempt or request with invalid authentication from..." to api/template for non admin accounts

Hi,
In my logs I have an error which appears about ten times a second and which is as follows:

2023-11-12 12:47:43.591 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from A2.####.local (10.0.2.6). Requested URL: '/api/template'. (Mozilla/5.0 (Linux; Android 14; Pixel 8 Build/UD1A.230803.041; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/118.0.0.0 Mobile Safari/537.36 Home Assistant/2023.10.2-11484 (Android 14; Pixel 8))

It matches my girlfriend’s smartphone.
I don’t have a proxy problem or anything like that and I’ve noticed that this error disappears if I change his account to “Administrator”.
Except that it’s not a permanent solution, especially as I’m planning to create other user accounts…
I’ve also noticed that on the dashboard, some informations in some lovelave cards doesn’t appear when his account is in “User” mode.

Any idea what could be causing this problem?