Cannot enable 'Require secure updates' nor edit description for some core attributes ('locale' and 'phone')

I am experiencing an issue where I cannot enable the 'Require secure updates' option for user attributes such as 'locale' and 'phone'.

While I understand that 'User ID' is a non-configurable attribute, the same behavior for 'locale' and 'phone' is concerning.

This could potentially allow unauthorized updates to a user's phone or locale if a 'User ID' is guessed, as there's no way to enforce secure updates for these fields.

Additionally - the description for these attributes cannot be modified either.