Since this is distro-specific. it's most likely a packaging concern, but since the polkit rule files are in this repo, those rules are not correct in a fedora-based distro, where the default group for sudoers is "wheel" and not "sudo".

subject.isInGroup ("sudo")

should normally be

subject.isInGroup ("wheel")

I am not sure if this, at the moment, has any real consequences. I did some tests trying to perform the actions where this rule applies (like changing the keyboard layout). I expected an authentication request instead of the action just working, but it just worked . Not sure if this is taken care of by some other polkit rule in the system, I did not investigate further.

The only rules I see belonging to a cosmic package are

cosmic-settings-daemon.rules
cosmic-settings.rules