On the first one, I believe that it will show it for Admins and Mods regardless of the settings.

The second one, I'm guessing the flood check is only detecting the POST operation before validating the form contains valid data.