Using the Mailpress 3.5 add-on 'sync_wordpress_user" newly registered users of WP gets added to the MP-user list fine. However, even when WP moderation is on, pending users in WP are in this process immediately assigned 'Active' in Mailpress, and thus they DO receive newsletters before admin moderation have been able to grant or deny them a subscriber role. It seems as a strong security flaw that a new user just by registering to the site gets immediate access to newsletters before having passed user moderation. Should not a pending WP user be synced as a 'Waiting' user in Mailpress database and thus be restricted from emails by default, and first after granted s subscriber role be promoted to 'Active'?
Any thoughts on why this is so? Bug or feature?