Do I miss something? An HTML comment is displayed in the raw view of the edit history.
So it doesn’t cover the “only the author can see it”, right?
The history is visible either by staff only, or by everyone:
Setting edit history visible to public: “Allow everyone to see previous versions of an edited post. When disabled, only staff members can view.”