The changes in SERVER-86328 added safety features to ensure that secondaries with cluster roles that do not match the primary's cluster role will crash. It does this by checking that the shard identity document replicated to the secondary matches its own cluster role, and if it doesn't it will crash. However, the code failed to account for a replica set only secondary and a configsvr/shardsvr primary.