On the pages for WrapLayer and WrapTarget under the Summary table, the properties CageMeshId, CageOrigin and ImportOrigin aren’t marked with plugin security despite that currently being the case. The info on the BaseWrap page itself and the drop-down menu for inherited properties are labelled with plugin security as expected.
This may be how the docs processes the API dump, it might see the Read permission being unlocked, but not the write perm and wrongly assuming it doesn’t have any security.
HTTPEnabled has the same issue for example, anything can read it, but only LocalUser (command bar) can change it.