And unless the national default access values say otherwise. This is addressed here. A cycleway in the Netherlands tagged with only highway=cycleway will route pedestrians unless the router completely ignores the documented defaults. There are several countries where the default foot value is yes (or another permissive value) for highway=cycleway.