It is possible to read hierarchical custom setting via
$Setup(= global variable); however, each profile/user needs to activate the security feature
Activating that security feature will compromise the system because a user will have access to Apex classes and etc. Moreover, users can modify the custom settings entries.
Is there any workaround to read a hierarchical-custom-setting data via $Setup without activating the security feature