ASP.NET Core Identity: Difference between [Authorize] and user null check?

Question

Why does the Identity scaffold use user null checks if(user==null) if there is the [Authorize] annotation for the Authorization middleware? Are the