Public dashboard, embeded, still requires authentication?

Exactly as the title says, I have a dashboard set as public, then get the url embed link and place it on a page only to see a login screen

Whats up with this? basic auth also does not function whatsoever.

Credentials passed like so (in a web browser) do not work
https://username:password@sub.domain.com

Whats the point of the embed option if there is hardly any way to use it?