The following workaround which users can see if it is feasible at their end: This could be handled by Page Experiences. By creating the whole page for a specific role:
They would avoid a possibly huge performance impact that would come from Liferay implementing fragment based permission checking
They would be able to control who gets to see what
They would always be able to see the fully rendered page