In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.
https://www.arista.com/en/support/advisories-notices/security-advisory/19917-security-advisory-0103