Custom Access check for module route
What happens if you replace:

requirements:
  _method: 'POST'
  _custom_access_check: 'TRUE'


With:

requirements:
  _method: 'POST'
  _permission: 'access content'


Any then remove your CustomAccessCheck code