When I tick the box to "Moderate" in Settings, the Author gets Editors access.
i.e. They get access to edit all posts for the entire blog.
I only noticed this today. Last week, it was fine.
I am not sure if there has been an update to the plugin since then.
It leave the blog at the mercy to the users with "Moderators" access.