Anyone else having issues with the 'Terms of Use' feature not showing for some users?

We've been testing Entra ID's Terms of Use feature for conditional access. Found a reproducible bug.

Scenario:
* Configured a ToU policy for a security group.
* Published it, required assignment.
* Most group members get the prompt correctly.
* A subset of users (tested with 3 out of 15) never see the ToU prompt. They bypass it completely and access the app.

Checked:
* User is definitely in the assigned security group.
* No conflicting CA policies.
* Browser sessions cleared, different devices.

Is this a caching issue or broken assignment logic? Microsoft docs are no help.

Anyone else replicating this? Need to know if it's our config or a platform bug.

- bench_beast