These methods should check content/view_embed permissions and filter out those not accessible, which would remove the need to check for the same using Repository::sudo() in:

• eZ/Publish/Core/FieldType/XmlText/Converter/EmbedToHtml5
• eZ/Publish/Core/MVC/Symfony/Controller/Content/ViewController

Ref:

https://github.com/ezsystems/ezpublish-kernel/pull/490
https://github.com/ezsystems/ezpublish-kernel/pull/644

Both methods should check for the same permissions, but if for example content/view_relation is going to be introduced in the future it might make sense to implement them both.