Caught by @tomek. useStaffCanSee is basically the same as useIsRestoreFlowEnabled anyway, but because we were not using useIsRestoreFlowEnabled, the migration could still be turned off after release.
This is because this handler was implemented a lot earlier than useIsRestoreFlowEnabled.