I think this PR in node 24 (nodejs/node#58029) resolved the security concern of "enterWith" in guard (and optionally in middleware initializers).
Tests:

Maybe we should add notes about it as well?
Also in older versions (based on the examples in this PR as well), we can avoid the same issue with
const als = new AsyncLocalStorage();
als.enterWith(undefined); // Forcefully enable the AsyncLocalStorage.
