Istio-init is still created even with istio-cni installed

As title, I have installed istio and istio-cni using Helm chart without any customization on Talos Linux (Kubernetes v1.27.1). However, when I deployed my application with namespace label istio-injection=enabled, the istio-init init container is still be created and thus violate the baseline:latest security profile. Can anyone help me?