dtproperties stores the information for database diagrams. Internally it's a system table and public by default has access to all system tables. That's why the permissions are set like they are.

Personally I would say only db_owners and maybe ddl_admins need access to this table, but since it doesn't contain any user data the security risk is not such a big issue.