Can mhpmevent21h be accessed from any privilege level?
No. The official CSR table lists mhpmevent21h as a Machine mode CSR. Lower-privilege software may access the corresponding state only when a relevant standard extension provides an explicit delegation or permission mechanism. Instructions accessing nonexistent CSRs are reserved; exceptions for implemented CSR accesses still follow the applicable privilege, virtualization, and CSR-specific rules.