You're not wrong, their guidance is incorrect. Not the first time they pulled this crap either, remember their buggy PrintNightmare mitigations...
They're also matching on URL instead of REQUEST_URI there. Edit: Ah, I missed that, they do state that you need to change the match condition here, my bad. Please disregard the deleted part.
