Thanks all for the extra information here! 
I checked more information internally and I confirm this is currently working as expected and we couldn’t find a different way it used to be before. The custom fields permissions will depend on its permissions as well, for example if they are part of a specific project or the Organization’s library.
I hope this helps but let me know if you have any questions and I’ll be happy to investigate it further!